Dark Caracal Adds New Malware to Cyber Espionage Arsenal

Dark Reading coverage from August 17–26, 2026 highlights active cyber-espionage campaigns, modular malware and banking trojans, credential and session theft, ransomware and botnet evolution, exploited enterprise vulnerabilities, supply-chain and insider risks, and emerging threats involving AI agents, LLM poisoning, prompt injection, and insecure sandboxing. Notable items include exploitation of Zimbra CVE-2026-73570 and a critical GitLab zero-click flaw (CVE-2026-19478), along with attacks targeting Android devices, industrial protocols, Microsoft 365 sessions, cloud environments, and vehicle