INTERPOL Operation Serengeti III: Transnational Cybercrime Crackdown Across 21 Countries
INTERPOL coordinated Operation Serengeti III from June 29 to August 31, 2026, disrupting 10,909 malicious networks across 21 jurisdictions, primarily in Africa. The operation dismantled infrastructure used for ransomware, business email compromise (BEC), and digital extortion, specifically targeting professional-grade fake investment platforms and fraudulent call centers used for social engineering. Technical collaboration with private-sector intelligence partners enabled the identification of 65,929 victims and the arrest of 1,462 suspects. Law enforcement recovered over $105 million of $385 million in attributed losses through coordinated asset tracing and network disruption.
Microsoft 365 Multi-Vendor Social Engineering Vulnerability Rollup
Microsoft's October 2026 Patch Tuesday addressed 1,413 vulnerabilities, including over 670 privilege escalation and 300 remote code execution flaws. A critical zero-day vulnerability was actively exploited via social engineering-driven credential theft. Attackers chained compromised Active Directory tokens with Windows kernel vulnerabilities (CVE-2026-XXXXX) and Office macro engine flaws (CVE-2026-YYYYY) to achieve SYSTEM-level access and facilitate ransomware deployment. The update also remediates SharePoint Server deserialization issues and SQL Server stored procedure elevation of privilege. Organizations must prioritize patching Windows and Office and implement strict MFA and conditional access policies to interrupt these multi-stage attack chains.