Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

2026-06-25T02:51:48Z6c030db74ec78f8672cfb138db0360633e338011f5c80e404e680b280f1899da
AI-platform-vulnerabilitiesAmadeyCISA-KEVCVE-2026-20230CVE-2026-20971Cisco-Unified-CMDifyTapFortiBleedGSM-R-outageLantronix-EDS5000SSRFSamsung-KNOXShapedPluginStealCUbiquiti-UniFi-OSWordPress-backdoorXsoliscredential-leakcritical-infrastructuredata-breachmalware-infrastructureoperation-endgameransomwaresupply-chain-attackuse-after-free

What happened

Multiple high-impact security events reported: Europol’s Operation Endgame disrupted StealC and Amadey malware infrastructures used for ransomware and fraud; Cisco Unified Communications Manager vulnerability CVE-2026-20230 (CVSS ~8.6) is being actively exploited to achieve SSRF, file writes and root access; CISA added Ubiquiti UniFi OS and Lantronix EDS5000 plugin flaws to its Known Exploited Vulnerabilities catalog; a large credential broker leak (FortiBleed) exposed valid logins for ~73,000 Fortinet firewalls; a nationwide GSM‑R railway outage in Germany highlighted critical-communications/

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
6c030db74ec78f8672cfb138db0360633e338011f5c80e404e680b280f1899da
Enrichment time
2026-06-25T02:51:48Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame · Baitaphish