Operation Serengeti 2.0 dismantled almost 11,500 malicious infrastructures between June and August. Officials arrested more than 1,200 alleged cybercriminals.

The software defects, which have a maximum-severity rating, do not require authentication and allow remote attackers to execute code arbitrarily on the underlying system.

The number of Citrix customers impacted by CVE-2025-5777 remains unknown, but researchers have already observed more than 11.5 million attack attempts, targeting thousands of sites.

Trend Micro researchers discovered and reported the eight-year-old defect to Microsoft six months ago. The company hasn’t made any commitments to patch or remediate the issue.

The international law enforcement operation is the latest to tackle cybercrime on the continent.

A report from Trend Micro details the highly sophisticated ways Salt Typhoon carries out its operations.

The group is believed to have hit more than 50,000 victims.

The CyclopsBlink malware is now targeting internet routers from hardware maker ASUS, Trend Micro researchers said.

The group shares some similarities with Fancy Bear, but is a separate organization, Trend Micro found.

The Winnti Group's gambling targets are usually in other parts of Asia.