Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M

2026-05-04T07:24:19Z9c837dd2be9f11572c51022559ff76b867cb1c3e739aeadbed59d51f9f1b15ce
CISA-KEVCVE-2024-1708CVE-2026-31431CVE-2026-3854CVE-2026-42208ConnectWiseVECT-2.0credential-theftfacebook-compromisegit-rcegoogle-appsheetlinux-lpelocal-privilege-escalationnpmphishingpypiransomwareruby-gemssource-code-breachsql-injectionsso-abusesupply-chain-attackvishing

What happened

A large set of active cyber threats and high-impact incidents were reported: an international law-enforcement operation arrested 276 suspects and dismantled nine crypto scam centers; multiple actively exploited and high-severity vulnerabilities were disclosed and added to CISA KEV (notably Linux LPE CVE-2026-31431 "Copy Fail", GitHub RCE CVE-2026-3854, and LiteLLM SQLi CVE-2026-42208); Trellix confirmed unauthorized access to portions of its source code repository; and extensive supply-chain and credential-theft campaigns impacted popular packages (PyTorch Lightning, SAP-related npm, poisoned

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
9c837dd2be9f11572c51022559ff76b867cb1c3e739aeadbed59d51f9f1b15ce
Enrichment time
2026-05-04T07:24:19Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.