NetNut proxy network disrupted, 2 million infected devices cut off

BleepingComputer roundup (Jul 1–3, 2026) highlighting multiple high-risk threats and incidents: a joint operation disrupted the NetNut residential proxy network that abused ~2 million compromised Android devices; a new ARToken phishing‑as‑a‑service (affiliate of EvilTokens) exposes a comprehensive Microsoft 365 phishing toolkit; ConsentFix/ClickFix OAuth-based MFA bypasses are being abused and mitigations (e.g., Opera Paste Protect) are being rolled out; CISA warns of active exploitation of a high‑severity Microsoft SharePoint RCE and Cisco confirms active exploitation of a Unified CM flaw; a広