Law enforcement hits StealC and Amadey malware networks

Multiple security developments: international law enforcement’s Operation Endgame disrupted infrastructure for StealC and Amadey (malware used together to harvest data). A critical active exploitation was reported against Cisco Unified Communications Manager (CVE-2026-20230) — attackers are abusing an SSRF (WebDialer) to drop webshells and achieve remote code execution. LastPass customer data was exposed after OAuth tokens were stolen in a supply-chain attack on Klue, enabling access to LastPass’ Salesforce environment. Healthcare vendor Xsolis suffered a targeted phishing attack that resulted