Over 20,000 crypto fraud victims identified in international crackdown

A set of active, large-scale threats and notable defensive developments were reported: an international law enforcement action identified over 20,000 victims of cryptocurrency fraud; CPUID’s download links were compromised to deliver malware via CPU‑Z and HWMonitor (supply‑chain compromise); nearly 4,000 Rockwell Automation PLCs were exposed in Iranian‑linked campaigns against U.S. industrial networks; the Smart Slider 3 Pro update mechanism was hijacked to push malicious WordPress/Joomla builds; new LucidRook Lua‑based malware is targeting NGOs and universities; VENOM, a phishing‑as‑a‑service