Operation PowerOFF identifies 75k DDoS users, takes down 53 domains
2026-04-17T01:23:29Z•99c90df9d2a983af7ade9211a5241425c8b3b210ba5387f7ac86e39f05862aeb
ATHR-platforms (AI voice)DDoSHugging FaceMarimoMcGraw HillMicrosoft DefenderNKAbuseNginx UIOperation PowerOFFRedSunShinyHuntersWordPress-compromiseZionSiphonactive-exploitationantivirus-disabledata-breachoperational-technologyproof-of-conceptsigned-software-abusesupply-chain-compromisetakedownvishingvulnerabilitywater-treatmentzero-day
What happened
A batch of high-impact security stories: active exploitation and proof-of-concept releases for multiple critical flaws (including a Microsoft Defender 'RedSun' zero-day PoC and an actively exploited Nginx UI auth-bypass), plus a critical Marimo notebook vulnerability being abused to deploy NKAbuse via Hugging Face. OT-focused ZionSiphon malware targets water treatment/desalination environments. Law-enforcement/industry takedown Operation PowerOFF identified ~75k DDoS users and 53 domains. Other notable incidents include a 13.5M-account McGraw Hill data leak (ShinyHunters), WordPress plugin/sup
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 99c90df9d2a983af7ade9211a5241425c8b3b210ba5387f7ac86e39f05862aeb
- Enrichment time
- 2026-04-17T01:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.