Operating Lightning takes down SocksEscort proxy network blamed for tens of millions in fraud

2026-03-12T19:24:00Z5084d28bb0ae19d28a7da05044fc53e9732512c19c3bf121dc8a6456a76aa1c1
AI agentsCISAChina CERTCopilot AgentELECQFBI investigationIranian threatsMicrosoft ExcelOpenClawRCESalesforce data heistShinyHuntersSocksEscortStrykerWordPress compromiseagentic AI securityfake CAPTCHAinfostealern8nransomwareresidential proxyvendor compromisevishingwiretap systemszero-click

What happened

A batch of security headlines highlights multiple active and high-impact incidents: CISA confirmed active exploitation of a max‑severity RCE in the n8n workflow automation platform; a critical Microsoft Excel flaw involving Copilot Agent can be weaponized for zero‑click information disclosure; and international law enforcement disrupted the SocksEscort residential proxy network used for large‑scale fraud. Additional notable items include China’s CERT warning about the OpenClaw agentic AI tool, Iranian state-linked threats and claimed attacks on US tech and med‑tech firms, ransomware and data‑s

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
theregister_security
Record identifier
5084d28bb0ae19d28a7da05044fc53e9732512c19c3bf121dc8a6456a76aa1c1
Enrichment time
2026-03-12T19:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.