Cybercriminal VPN Dismantled in Europol Crackdown
2026-05-21T20:52:18Z•ca2ecf36cb72f4c755acfdc3b316f4587e06c79f69ccffab9d470a4d622cd5ad
android-malwareantvaptcode-repository-breachexchange-zero-dayfragnesiagit-breachgithubgrafanakernel-vulnerabilitylinux-kernelmalicious-vs-code-extensionnpmnx-consolepremium-fraudptracepwn2ownpypiransomware-enablers','fox-tempest'','law-enforcement','europol',software-supply-chainsupply-chaintanstackteampcpwebwormzero-day
What happened
A broad set of high-impact security events and trends: multiple software supply‑chain compromises (Mini Shai‑Hulud hitting npm/PyPI, TanStack/AntV infections), a malicious VS Code extension (Nx Console) used to breach GitHub internal repositories and steal Grafana source code, and widespread code-repository supply‑chain fallout. Several serious vulnerabilities were disclosed/exploited, including a severe on‑prem Exchange zero‑day, a nine‑year‑old Linux ptrace flaw leaking SSH keys and password hashes, and a new Fragnesia Linux kernel local privilege‑escalation. Additional issues include large‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- ca2ecf36cb72f4c755acfdc3b316f4587e06c79f69ccffab9d470a4d622cd5ad
- Enrichment time
- 2026-05-21T20:52:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.