NetNut proxy network disrupted, 2 million infected devices cut off

Multiple high-impact incidents and active campaigns were reported: law enforcement and Google disrupted the NetNut residential proxy network that abused ~2 million compromised Android devices; ARToken (a phishing‑as‑a‑service affiliate of EvilTokens) exposed an extensive Microsoft 365 phishing toolkit; ConsentFix and ClickFix techniques enable near‑instant Microsoft 365 token theft and MFA bypass, prompting mitigations such as Opera's Paste Protect; CISA warned of active exploitation of a high‑severity Microsoft SharePoint RCE patched in May, and Cisco confirmed active exploitation of a recent