Police dismantle Kratos phishing platform, arrest developer

Multiple high-impact active threats and law-enforcement actions were reported: German and US authorities dismantled the Kratos phishing-as-a-service infrastructure and an Indonesian developer was arrested; a large FakeGit operation used ~7,600 malicious GitHub repos to distribute SmartLoader and StealC malware; threat actors are actively exploiting critical Microsoft SharePoint RCE CVE-2026-50522 to steal machine keys and maintain persistence; WordPress ‘‘wp2shell’’ flaws (CVE-2026-63030, CVE-2026-60137) are being used to deploy persistent webshells and malicious plugins; the Qilin ransomware团