Six things we learned from the LockBit takedown

**Executive summary:** International law enforcement disrupted the LockBit ransomware operation (Operation Cronos), seizing the gang's leak site and infrastructure, making arrests, and prompting U.S. sanctions; the report confirms LockBit claimed over 2,000 victims and received more than $120M in ransoms, shows that paid victims' data was still retained, and notes a PHP remote-execution vulnerability (CVE-2023-3824) tied to the compromise of the gang's servers.