Kratos phishing-as-a-service kit loses its battle with international law enforcement
2026-07-21T19:24:09Z•24b90a4d786f894d9e118b6c94800993854493b8ef126cab69a2a9bd12dacedc
Android-GeminiCISAFortiSandboxHOLLOWGRAPHJanuscapeLLM-securityMicrosoft-365OVHSunoWordPressdata-breachhypervisorlaw-enforcementphishingsupply-chaintakedownvulnerability-exploitationzero-day
What happened
A cluster of high-impact security developments: international law enforcement dismantled the Kratos phishing-as-a-service infrastructure and arrested an alleged developer; AI music platform Suno reportedly suffered a 55M-account data breach; OVH applied disruptive mass reboots to mitigate a critical Januscape hypervisor bug; and attackers are actively exploiting multiple critical product flaws (notably a widely attacked WordPress vulnerability and FortiSandbox command-injection issues that drew a CISA patch order). Several other matters of concern include Microsoft 365 calendars abused in theH
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 24b90a4d786f894d9e118b6c94800993854493b8ef126cab69a2a9bd12dacedc
- Enrichment time
- 2026-07-21T19:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.