Victims were sometimes targeted months or over a year after their first compromise, the FBI has warned.
Administrators running affected releases should update the server and rebuild C-language extensions, since the fix is incomplete without them.
The intrusion came through a tampered software update, and the number of customers who installed it is still unknown.
Thai authorities say the notices alone do not show that attackers got into anyone's device, and they have no evidence tying the activity to Pegasus.
Current and former staff are being notified, and the chipmaker says no customer or operational data is involved.
Customers must install OS fixes and fully stop and start affected VMs, and host operators should expect BIOS updates from server makers through December.
Owners of wallets bought from CryptoBilis since March are advised to move their funds to a new wallet with a new recovery phrase.
The number of affected drivers is expected to rise as more state notifications are filed, and Uber has not said how many customers were hit.
Users who link GitHub to Apify must reconnect their accounts after tokens were revoked, and some stored data was viewed by the intruder.
Affected users may see print jobs fail until Microsoft releases a fix, and the problem follows earlier printing regressions in Windows.
The operation's high share of interception points to a rising threat to two-factor authentication on mobile networks in the region.
Organisations running affected Check Point products should patch now or stop the dynamic_server process, since attackers have had root access on some devices since late October.
Organizations running affected Check Point appliances face a destructive attack in two waves, with the second reaching several countries.
The seizure recovers a fraction of the roughly $6.3 billion taken, and the FBI links the theft and a separate scam to North Korean actors.
Patching alone may not clean up a compromised N-central host, since attackers were already running cryptocurrency miners on systems that had the latest hotfix.
Microsoft has not confirmed the issue, assigned a CVE or shipped a fix, and there is no evidence yet of attacks in the wild.
Travelers who rely on AI assistants will still see United fares, but will have to finish any purchase themselves.
Operators running NetScaler appliances and the Console management product should apply the fixed builds now, since Citrix reports no known exploits so far.
Millions of stolen logins were seized, and affected people and site owners are being urged to check exposure and secure their accounts.
Developers relying on Apify should check their integrations and re-enroll two-factor authentication while the investigation continues.
