Interpol operation leads to 58 arrests and identifies 263 suspects across 22 countries

Interpol’s Operation Jackal IV, an eight-month international law enforcement effort, has identified 263 cybercrime suspects and resulted in 58 arrests across 22 countries. The operation, which ran from November 2025 to June 2026, primarily targeted West African organized crime groups engaged in cyber-enabled financial fraud and money laundering.
The initiative aimed to disrupt illicit financial flows, identify high-value targets, seize criminal assets, and support prosecutions. This operation builds upon previous Interpol-led efforts, including Operation Jackal III in 2024, which led to 300 arrests.
Significant actions were taken in several countries. In South Africa, authorities raided seven locations linked to a syndicate running romance and investment scams that targeted retirees in English-speaking countries. This led to 39 arrests, the blocking of 257 bank accounts, and the seizure of approximately $2.67 million.
Romanian authorities dismantled a group operating an investment scam through a call center that promoted fraudulent high returns from stocks and cryptocurrencies. This network is estimated to have been responsible for stealing and laundering €143 million. Police arrested 11 individuals and seized about €330,000 ($385,000) in cash and cryptocurrency, along with six properties and luxury watches.
In Argentina, the operation identified a 196-person Crime-as-a-Service (CaaS) network. This group allegedly provided website domains and money laundering support to West African organized crime groups, resulting in 17 arrests.
Tomonobu Kaya, Director of the Interpol Financial Crime and Anti-Corruption Centre, emphasized that the operation’s success stemmed from tracking illicit financial flows across international borders, which he described as the "lifeblood" of organized crime.
Beyond financial fraud, investigators also noted an increase in sextortion cases targeting minors, with victims as young as 14 years old. Some criminal networks were found to be utilizing CaaS capabilities from external providers to outsource activities such as money laundering.
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be initiated remotely.
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely.

OpenAI has announced a $1 billion commitment to provide subsidized access to its Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders. The initiative, named Daybreak for Frontline Defenders, will offer AI models, training, and technical support over the next six months, prioritizing water and wastewater utilities, electric grid operators, and local government entities. This move aims to equip organizations with limited budgets and staff against increasingly sophisticated cyber threats.

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the flaw and named it StyleSmuggler, said attacks started on September 4. "Sansec is publishing early
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.

Attackers are exploiting two new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the U.S. and Europe. Attackers are exploiting two recelty disclosed PaperCut flaws, CVE-2026-81578 and CVE-2026-82078, in attacks targeting schools and other education organizations in the U.S. and Europe, as reported by TheHackerNews. Arctic Wolf researchers observed