[evil-corp]

June 20, 2026

• Operation Endgame dismantled 106 SocGholish C2 servers/domains and cleaned ~15,000 infected WordPress sites tied to Evil Corp, in a Dutch/Canadian/German/U.S. action. The Hacker News, SecurityWeek · Threat Intelligence & Espionage

in FortiBleed Burns 86,000 FortiGate Devices as Novo Nordisk Loses 1.3TB — Including AI Models — to a Leaked GitHub Token

June 19, 2026

• Operation Endgame disrupted the SocGholish/FakeUpdates chain tied to Evil Corp, remediating 14,971 infected WordPress sites and taking down 106 servers/domains; police flagged leaked credentials tied to ~1.4M sites (SecurityWeek, BleepingComputer). · Threat Activity & Intrusions

in FortiBleed Burns 70,000+ Fortinet Edge Devices While a Leaked GitHub Token Guts Novo Nordisk