🚨 Operation Serengeti III dismantles thousands of malicious cyber networks One of Africa’s largest cybercrime enforcement operations has seen agencies from 21 countries: 🔵 Arrest 1,462 suspects 🔵 Disrupt 10,909 malicious networks 🔵 Recover USD 105 million in illicit funds Under INTERPOL's coordination, investigators from participating countries joined forces to combat cyber-enabled fraud, ransomware, business email compromise, online scams and digital extortion. Authorities also identified 65,929 victims targeted by cybercriminal networks, underscoring the scale and sophistication of today's digital threats. Financial investigations linked criminal activity to losses exceeding USD 385 million. ➡️ 🔗 interpol.int/en/News-and-Eve…

‼️ A critical Signal bug could keep your microphone, and possibly your camera, live after you hang up. The other caller can flood the call's event queue so your hang-up is never processed. Dubed CVE-2026-113380 it scored 9.3 and got fixed in September.

SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: axios.com/2026/10/22/ai-agen…

BBC: US prosecutors say the ex-OpenAI engineer accused of bugging an executive meeting room has Saudi government backing. An unnamed Saudi royal exchanged frequent WhatsApp messages with Alfozan and tried to recruit him to a Saudi AI initiative, and Alfozan allegedly agreed in May that the kingdom needed him more than the US while saying he would wait for his OpenAI stock to vest. The day after his arrest, his wife and son flew one-way to Qatar on business-class tickets that prosecutors say a Saudi military official booked and paid for. Prosecutors say he used his wife’s ChatGPT account to research making and encrypting a recording device, and used an internal OpenAI productivity agent to find rooms used by senior staff and outside partners. The bugged room hosted meetings between OpenAI leadership and government officials, which prosecutors frame as a national security risk, while OpenAI says it has seen no sign of stolen model weights, source code or customer data.

Authorities say the wife of Alfozan, the OpenAI employee who allegedly bugged an OpenAI exec conference room, was to leave the U.S. on one flight, then a "member of the Saudi military booked and paid" for another one-way flight to Saudi Arabia for the wife and son.

Imagine this. Your boss calls and asks for your help. It’s urgent. It’s definitely him: you can see and hear him clearly. But what if it isn’t? Deepfake technology has evolved rapidly. AI can now replicate real faces, voices and behaviours using just a few photos, videos or audio clips found online. The threat extends beyond the workplace; scammers can impersonate friends and family, preying on emotion and creating a false sense of urgency to make you act quickly. So what should you do? 🔵 Don’t rush. Even if you believe you’re speaking to someone you trust, take a moment to assess the situation. 🔵 Verify. Hang up and call the person back on their usual number. 🔵 Use a safeword. Establish a secret phrase with close contacts. 🔵 Secure your accounts. Turn on two-factor authentication everywhere. Activate multi-step verification for large business transactions. 🔵 Report it. If you suspect a scam, contact local law enforcement immediately. 🔵 Train your teams. Business owners: make sure your staff are trained to recognise phishing, vishing and other social engineering tactics. Wait. Validate. #DontTakeTheBait Find out more ➡️ 🔗 interpol.int/en/News-and-Eve… Funded by 🇯🇵