CyberNews West African Crime Syndicates Disrupted in Global Law Enforcement Operation A massive international law enforcement effort has dealt a significant blow to organized crime groups in West Africa, disrupting their networks and infrastructure. Interpol’s Jackal IV operation, which involved 22 countries across six continents, resulted in the arrest of 58 suspects and the identification of … Read more
**Phishing Service Offers Turnkey Solution to Steal Microsoft 365 Sessions for $320 a Month** A novel phishing service has emerged, offering a commercial-grade solution for attackers to steal authenticated Microsoft 365 sessions for as little as $320 a month. Dubbed “NovaCookies,” this adversary-in-the-middle (AitM) phishing service is targeting hundreds of organizations across multiple regions, with … Read more
Android Malware Hijacks Update System for Car Head Units, Highlighting Wider Botnet Threat In a disturbing escalation of cyber threats, researchers at Kaspersky have discovered Android malware targeting car head units, the hardware modules on dashboards that control vehicle communication, entertainment, and information systems. This is the first documented case of its kind, where malicious … Read more
A Growing Threat: North Korean Operatives Pose as IT Workers, Steal Sensitive Data North Korean operatives are increasingly posing as IT workers to infiltrate organizations, steal sensitive data, and send funds back to the regime. According to a recent report from Huntress, these fake employees have improved their tactics, making it challenging for companies to … Read more
Dark Caracal’s Latest Addition: A New Malware Framework for Cyber Espionage A sophisticated cyber espionage operation has just gotten a significant upgrade. Dark Caracal, a threat group linked to Lebanon’s General Directorate of General Security (GDGS), has added a new malware framework called GoCaracal to its arsenal. This modular malware tool allows the group to … Read more
North Korean Operatives Pose as IT Workers, But Red Flags Can Expose Them A growing trend of North Korean operatives posing as IT workers has been making headlines in recent years, with the latest reports suggesting that these agents have significantly improved and increased their activity. These fake workers infiltrate organizations by using stolen or … Read more
Dark Caracal Continues to Upgrade Its Cyber Espionage Arsenal, Adding New Malware Framework A Lebanon-linked cyber threat group has significantly expanded its capabilities with the introduction of a new modular malware framework, dubbed GoCaracal. This sophisticated toolset allows Dark Caracal to more effectively steal sensitive data and maintain persistent access to compromised systems. The discovery … Read more
Ubiquiti Patches Critical Vulnerabilities, Urgent Action Required for Millions of Devices Ubiquiti has released critical patches for three maximum-severity vulnerabilities that can be exploited remotely by attackers without any privileges. The flaws affect devices running UniFi Protect Application, UniFi Talk Application, and UniFi OS Server, putting millions of users at risk. The first vulnerability (CVE-2026-77537) … Read more
A Wake-Up Call for Snowflake Customers: The Perils of Service-Account Passwords and What’s Next In a shocking case that exposed the vulnerabilities of service-account passwords, Connor Moucka and his co-conspirators used valid customer credentials to log in to over 165 Snowflake customer organizations, stealing billions of records, including the call and text records of nearly … Read more
A critical vulnerability chain in the popular Avada theme for WordPress has been discovered, allowing an unauthenticated attacker to execute arbitrary PHP code on a server with ease. This exploit, tracked as CVE-2026-18431, received a 9.8 critical severity score and can be chained together from six separate security issues. The attack requires no interaction or … Read more