October 23, 2026

What happened

Barracuda’s Cybersecurity Skills Gap Report says organizations are cutting cybersecurity roles while reporting shortages of expertise needed to manage threats. [1]

The report states that 56% experienced professional-workforce reductions linked to AI, split evenly between entry-level and higher-level roles. [2]

Known limitations

The supplied spans do not identify the survey population, timeframe, methodology, or whether the reported reductions were caused solely by AI adoption. [1] [2]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report.

2. [2]

   56% have experienced professional workforce reductions linked to AI, evenly divided between entry-level and higher-level roles.

Read the original article →

What happened

Google Cloud is adding OpenAI models through an initial private preview for selected business customers, including GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. [1] [2]

Google positions the models for demanding work, lower-cost professional tasks and everyday uses requiring fast responses. [3]

Businesses will purchase access through Google Cloud Marketplace; usage will appear on a single Google Cloud invoice and count toward existing cloud spending commitments. [4] [5]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers.

2. [2]

   The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna.

3. [3]

   Google positions them as options for demanding work, lower-cost professional tasks and everyday use that requires fast responses.

4. [4]

   More choice, one bill Businesses will purchase access through Google Cloud Marketplace.

5. [5]

   Usage will appear on a single Google Cloud invoice and count toward existing cloud spending commitments.

Read the original article →

What happened

INTERPOL’s Operation Serengeti III involved law-enforcement agencies from 21 countries between June 29 and August 31, 2026, targeting online fraud, ransomware, business email compromise, scams and digital extortion. [1]

INTERPOL reported 1,462 arrests, disruption of 10,909 malicious networks and recovery of more than USD 105 million in illicit funds. [2] [3]

Authorities identified 65,929 victims, while financial investigations linked the criminal activity to losses exceeding USD 385 million. [4] [5]

In Uganda, authorities broke up two international fraud networks and arrested 365 foreign nationals suspected of operating online investment and pension scams through scripted call centres, fake trading platforms and websites. [9] [10] [11]

In Nigeria, investigators arrested a suspect linked to phishing and business email compromise involving stolen software credentials and approximately 2.1 million email addresses; a separate investigation traced more than USD 2.4 million linked to an investment scam promoted through messaging apps. [12] [13]

Why it matters

The operation relied on intelligence about suspicious domains, IP addresses and command-and-control infrastructure from investigators in 20 African countries and the United States, with private-sector partners providing threat intelligence, technical analysis and investigative expertise. [6] [7] [8]

INTERPOL’s 2026 African Cyber Threat Assessment Report says AI can help criminals create convincing messages, improve social engineering and target more victims, although criminal infrastructure and methods for moving stolen money remain necessary. [14] [15] [16]

Known limitations

Several investigations remain active, with authorities continuing to identify suspects, trace illicit proceeds and analyze recovered digital evidence. [17] [18]

The reported arrests and infrastructure disruptions do not establish how many criminal organizations were permanently dismantled, how much recovered money will reach victims, or whether other operators will rebuild disrupted services. [19] [20]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   The operation brought together law enforcement agencies from 21 countries between June 29 and August 31, 2026, targeting online fraud, ransomware, business email compromise (BEC), scams and digital extortion.

2. [2]

   INTERPOL’s Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered $105 million across 21 countries.

3. [3]

   INTERPOL announced the results of Operation Serengeti III, a multinational cybercrime crackdown that led to 1,462 arrests, disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds.

4. [4]

   “Authorities identified 65,929 victims targeted by cybercriminal networks, underscoring the scale and sophistication of today’s digital threats.

5. [5]

   Financial investigations linked criminal activity to losses exceeding USD 385 million.

6. [6]

   Operation Serengeti III relied on intelligence provided before the enforcement phase.

7. [7]

   Investigators from 20 African countries and the United States received information about suspicious domains, IP addresses and command-and-control infrastructure associated with criminal activity.

8. [8]

   Private-sector cybersecurity companies also supported the operation, providing threat intelligence, technical analysis and investigative expertise.

9. [9]

   Uganda saw one of the largest actions in the operation.

10. [10]

    Authorities broke up two international fraud networks and arrested 365 foreign nationals suspected of running online investment and pension scams targeting people across Asia.

11. [11]

    Investigators found call centres where staff followed prepared scripts to convince victims to invest through fake trading platforms and websites.

12. [12]

    In Nigeria, investigators arrested a suspect linked to phishing and business email compromise (BEC), which involved stealing software credentials and collecting about 2.1 million email addresses.

13. [13]

    A separate Nigerian investigation traced over $2.4 million linked to an investment scam promoted through messaging apps, with much of the money laundered through cryptocurrency.

14. [14]

    INTERPOL’s 2026 African Cyber Threat Assessment Report highlights the growing role of AI in cybercrime as financial losses rise.

15. [15]

    Criminals can use AI to create convincing messages, improve social engineering and target more victims.

16. [16]

    While AI does not replace the need for criminal infrastructure or ways to move stolen money, it can make scams easier to repeat and harder for victims to recognize.

17. [17]

    INTERPOL said several investigations remain active.

18. [18]

    Authorities are continuing to identify suspects, trace illicit proceeds and analyze digital evidence recovered during the operation.

19. [19]

    That qualification is important.

20. [20]

    Arrests and infrastructure disruptions are meaningful enforcement results, but they don’t automatically establish how many criminal organizations have been dismantled permanently, how much of the stolen money will reach victims, or whether other operators will rebuild the disrupted services.

Read the original article →

What happened

Imperva security researchers demonstrated that malicious Brotli data can cause an official Node.js build to run attacker-supplied code. [1]

Their Node2Shell proof of concept ran code on the official Node.js 24.22.0 Linux arm64 image without a debugger or custom build, using crafted input against the bundled Brotli decoder. [2]

The reported flaw is identified as CVE-2026-111497, and Node.js disclosed it. [2] [3]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated.

2. [2]

   Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder (CVE-2026-111497).

3. [3]

   Node.js disclosed the flaw

Read the original article →

What happened

Capcom disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, used for the company’s web services and some online games. [1]

Capcom detected suspicious activity on October 19 and confirmed the intrusion the same day. [2]

Why it matters

The article reports that the breach exposed 11.7 million account records. [3]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   The company has disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, the account people use to sign in to the company’s web services and to play some of its games online.

2. [2]

   It detected suspicious activity on October 19 and confirmed the intrusion the same day.

3. [3]

   … More → The post Capcom data breach exposes 11.7 million account records appeared first on Help Net Security .

Read the original article →

What happened

Pillow can be made to run operating-system commands on a server by specifying the name of a file it is instructed to open. [1]

CVE-2026-112900 affects Pillow’s handling of EPS images: Pillow passes the file name to Ghostscript to render the image without checking the name first. [2]

Why it matters

The described issue creates a code-execution risk when a server opens a crafted EPS image through Pillow. [1] [2]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open.

2. [2]

   The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

Read the original article →

What happened

A New Mexico judge ordered Meta to pay the state $25 billion after a jury found more than 43 million violations involving misleading public statements about how Facebook handled users’ personal data. [1] [2] [3]

The judge wrote that Facebook’s deception was intentional and that executives misled users about how the platform worked; the ruling described the case as concerning promises rather than a data breach. [4] [5]

Meta plans to appeal, arguing that the ruling and New Mexico’s enforcement of consumer-protection laws make operating in the state nearly impossible; its chief legal officer also characterized the case as an attempt to restrict free speech. [10] [11] [12] [13]

Why it matters

The case arose from the Cambridge Analytica scandal, in which a quiz app used data from about 300,000 participants and their friends to build a dataset of 87 million profiles. [6] [7]

The award may remain tied up during Meta’s appeal, and the amount could be reduced if a court lowers the number of violations. [8] [9]

New Mexico’s attorney general said the ruling warns technology companies that they must follow the law; consumer-protection fines under the state constitution go toward education. [16] [17]

Known limitations

Meta’s lawyers argued that New Mexico did not prove residents had seen the misleading statements or suffered harm from them, while Meta said it was confident it would win the appeal. [14] [15]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   This week a New Mexico judge ordered Meta to pay the state $25 billion.

2. [2]

   The order follows a jury finding that the company deceived Facebook users about their privacy, and it’s the biggest fine ever imposed on Meta.

3. [3]

   Jurors found in September that Meta committed over 43 million violations of New Mexico consumer protection laws by making misleading public statements about how it handled users’ personal data.

4. [4]

   Mathew wrote that Facebook’s deception was intentional and that executives consistently misled users about how the platform worked.

5. [5]

   This is a case about promises, not about a breach.

6. [6]

   The case grew out of the Cambridge Analytica scandal, in which a political consulting firm harvested Facebook data to build targeted political ads for the 2016 election.

7. [7]

   Cambridge Analytica got data through a personality quiz app that around 300,000 people took, and the app also pulled data on their friends, building a dataset of 87 million profiles.

8. [8]

   However, the money may remain tied up while Meta appeals the decision.

9. [9]

   Meta’s appeal could reduce the $25 billion fine if a court lowers the number of violations.

10. [10]

    Meta plans to appeal the $25 billion ruling.

11. [11]

    The company argues that the decision and the way New Mexico is enforcing consumer protection laws make it almost impossible to operate in the state.

12. [12]

    Meta’s chief legal officer, C.J.

13. [13]

    Mahoney, says the case is an attempt to restrict free speech and impose new rules on what people can say online.

14. [14]

    The company says it is confident it will win the appeal.

15. [15]

    Meta’s lawyers also argued that the state failed to prove that residents had actually seen the misleading statements or suffered harm as a result.

16. [16]

    New Mexico Attorney General Raúl Torrez said the ruling sends a clear warning to technology companies that they must follow the law.

17. [17]

    Under the state’s constitution, fines for consumer protection violations go toward education.

Read the original article →

What happened

According to Huntress, an attacker replayed stolen Microsoft 365 sign-in sessions to access email accounts at 79 organizations and created hidden inbox rules that concealed some messages from victims. [1]

The stolen sessions were replayed from servers at 1337 Services GmbH, described in the source as a hosting provider. [3]

Why it matters

Huntress tracked the campaign from July 14 through September 22, 2026, recording 497 successful sign-ins and more than 200,000 failed login attempts. [2]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress.

2. [2]

   The researchers tracked the campaign between July 14 and September 22, 2026, counting 497 successful sign-ins and more than 200,000 failed login attempts.

3. [3]

   The stolen sessions were replayed from servers at 1337 Services GmbH, a hosting provider incorporated … More → The post Microsoft 365 accounts compromised at 79 organizations, no passwords needed appeared first on Help Net Security .

Read the original article →

What happened

The UK government published plans that could impose prison terms of up to 14 years for damaging subsea cables off the UK coast. [1]

The proposal is contained in a White Paper from the Department for Digital, Culture, Media and Sport to update laws protecting undersea cables and pipelines, some dating back 140 years. [2]

The plans include unlimited fines for ship owners whose vessels damage the infrastructure. [3]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   Damaging a cable on the seabed off the UK coast could soon cost someone 14 years of their life behind bars, under plans the British government published this week.

2. [2]

   The proposal comes from a White Paper by the Department for Digital, Culture, Media and Sport that would update laws protecting undersea cables and pipelines, some of which date back 140 years.

3. [3]

   The plans include unlimited fines for ship owners whose vessels damage the infrastructure, new … More → The post UK proposes 14-year jail terms for subsea cable saboteurs appeared first on Help Net Security .

Read the original article →