One-two punch delivered in global operation disrupts cybercrime "assembly line"
2026-06-26T20:51:53Z•a756fc0030a273c04e4c1e734efbdf0b2170111436446c18c4c0e5c5af9b5744
backdoorcopilotcredential-theftcrypto-clippercybercrimedata-breachfedexfortinetlaw-enforcementlenovolinux-kernelmalwaremicrosoftnatonpmoperation-endgameoraclepeopleSoftprivilege-escalationred-hatsearchleak","2fasupply-chainuse-after-freevulnerabilityzero-day
What happened
Ars Technica's security feed (June 2026) highlights a string of high-impact incidents and developments: a global law-enforcement operation (“Operation Endgame”) disrupted widely used cybercrime tooling; multiple active zero-days and high-severity vulnerabilities (including a PeopleSoft 0-day exfiltrating gigabytes, a Linux kernel use‑after‑free allowing root, and a Copilot/SearchLeak flaw that exposed 2FA codes); a massive credential breach affecting thousands of sensitive networks (Oracle, Lenovo, FedEx, a NATO contractor, Fortinet); supply-chain compromises (Red Hat packages backdoored via N
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- a756fc0030a273c04e4c1e734efbdf0b2170111436446c18c4c0e5c5af9b5744
- Enrichment time
- 2026-06-26T20:51:53Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.