NetNut proxy network disrupted, 2 million infected devices cut off

A batch of high-impact security stories: law enforcement (with Google) disrupted the NetNut residential proxy network, cutting off access to ~2 million compromised Android devices and streaming boxes. A new phishing-as-a-service called ARToken—tied to the EvilTokens ecosystem—exposes a comprehensive Microsoft 365 phishing toolkit; related OAuth-based MFA bypasses (ConsentFix and ClickFix) are highlighted and being mitigated (e.g., Opera's new Paste Protect). CISA and vendors warn that a high-severity Microsoft SharePoint RCE patched in May is now actively exploited, and Cisco confirmed active/