Dark Reading

An international law enforcement operation, led by Interpol's Jackal IV, was conducted to disrupt crime infrastructure in West Africa. The focus of the effort was dismantling 'crime-as-a-service networks' and supporting infrastructure associated with groups like Black Axe.

Nigeria has initiated comprehensive policies focusing on financing, procurement, and infrastructure. These efforts aim to boost the nation's sovereign cloud initiative and increase local technical knowledge.

Cyber professionals are being called upon to assist in defending City Hall. The article highlights that government agencies with smaller budgets require crucial external support.

Researchers have discovered a threat actor named 'Jewelbug' APT that is conducting cyber espionage and financially motivated theft. This investigation revealed hackers-for-hire operating these activities from a single Web panel, demonstrating dual motives for state espionage and cryptocurrency theft.

Belgium's eID Authentication system was compromised, opening citizen accounts to RCE vulnerabilities. The incident revealed that the underlying trust framework for the electronic ID system was fully breached by severe flaws found in a key browser extension, which highlights broader problems with extensions generally.

AI browsers are vulnerable to a 'PleaseFix' zero-click agent hijacking attack where malicious instructions in content can grant attackers control over agents. The vulnerability has no simple fix, posing a significant security risk.

Unitel, Angola's dominant mobile operator, experienced a cyberattack that caused outages on the day of its public offering. The attack occurred hours before the government-owned telco's IPO.

The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks. The threat actor's playbook involves exploiting RMM systems through these methods.

Device code phishing increased by 1,500% in 2026, while vishing attacks doubled. Attackers are using newer social engineering techniques to bypass existing security controls and reduce detectable evidence.

Attackers are exploiting a newly discovered authentication bypass flaw, CVE-2026-18577, in N-able's RMM servers, allowing unauthorized administrator access. The vendor identified the vulnerability as a patch bypass vector.

Researchers developed a new tool to trace AI-generated videos back to their source, aiming to promote industry collaboration on enhanced protective measures.

The article emphasizes that the most valuable action for security teams is creating a certificate and key inventory. It highlights the importance of managing digital credentials to enhance security.

Interpol is using a global system to stop fraudulent payments, requiring law enforcement to act quickly to prevent cybercriminals from cashing out.

Southeast Asian cybercriminal syndicates have expanded their operations globally, shifting from trafficking goods to providing services while continuing to traffic people from at least 80 countries. This activity cost nations in the region at least $88 billion in 2025 alone.

A premium-grade malware-as-a-service called 'Flying Eagle' is being used by multiple threat groups to build infostealers that drain victims' bank accounts in China. The mobile RAT builder operates as a full-service platform, enabling cybercriminals to target financial data.

Security researcher Aleksandr Krasnov discovered that dormant non-human identities can create security blind spots in cloud systems. He introduced NHI Hound, an open-source tool designed to identify trust paths and mitigate these risks.

A flaw from 2002 leaves data centers vulnerable to server takeovers through offline password-cracking attacks on Internet-exposed server management controllers.

Attackers used Hermes, an autonomous open-source tool, in unrestricted 'YOLO mode' to conduct espionage against Thailand's Ministry of Finance. The attack targeted the Ministry of Finance using an AI-driven method.

The FBI attributes the successful disruption of LockBit, the largest ransomware group at the time, to breaking trust among its affiliates through Operation Cronos, a multinational law-enforcement effort.

Escalating threats are pushing boards to prioritize security, but communication gaps remain between CISOs and boards. Both groups report needing more support to bridge the divide.