Glassworm botnet dismantled by CrowdStrike/Google/Shadowserver; SRG escalates to physical law firm intrusions; MuddyWater abuses signed EDR binaries across 9 countries; two Defender zero-days patched after six weeks of live exploitation; Ghost CMS flaw hijacks 700+ domains for ClickFix delivery.