Operating Lightning takes down SocksEscort proxy network blamed for tens of millions in fraud
2026-03-12T19:24:00Z•5084d28bb0ae19d28a7da05044fc53e9732512c19c3bf121dc8a6456a76aa1c1
AI agentsCISAChina CERTCopilot AgentELECQFBI investigationIranian threatsMicrosoft ExcelOpenClawRCESalesforce data heistShinyHuntersSocksEscortStrykerWordPress compromiseagentic AI securityfake CAPTCHAinfostealern8nransomwareresidential proxyvendor compromisevishingwiretap systemszero-click
What happened
A batch of security headlines highlights multiple active and high-impact incidents: CISA confirmed active exploitation of a max‑severity RCE in the n8n workflow automation platform; a critical Microsoft Excel flaw involving Copilot Agent can be weaponized for zero‑click information disclosure; and international law enforcement disrupted the SocksEscort residential proxy network used for large‑scale fraud. Additional notable items include China’s CERT warning about the OpenClaw agentic AI tool, Iranian state-linked threats and claimed attacks on US tech and med‑tech firms, ransomware and data‑s
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 5084d28bb0ae19d28a7da05044fc53e9732512c19c3bf121dc8a6456a76aa1c1
- Enrichment time
- 2026-03-12T19:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.