Author: CWME Research & Threat Intelligence Desk

instagramlinkedinwebsite
The CWME Research & Threat Intelligence Desk produces evidence-led cybersecurity coverage for Cyber Warriors Middle East, with a focus on threat intelligence, ransomware, cybercrime, vulnerabilities, defensive research and emerging security risks. Its reporting distinguishes verified developments, attributed research findings and unconfirmed threat-actor claims while prioritising source transparency, technical accuracy and defensive relevance.
https://cyberwarriorsmiddleeast.com

Fideuram loses €95 million to AI-powered voice impersonation fraud

Dark Watch
Fideuram, the private banking arm of Intesa Sanpaolo, has reportedly lost approximately €95 million (around $108 million) due to a sophisticated AI-powered voice impersonation...

GitLab fixes CVE-2026-97229 integer overflow vulnerability in CI/CD regex handling

Resources
On October 12, 2026, GitLab released versions 19.4.2, 19.3.5, and 19.2.8 to address CVE-2026-97229, a critical integer overflow vulnerability in its CI/CD regex handling....

Microsoft’s Project Perception enhances security for AI agents by implementing continuous risk adaptation and containment strategies

Features
Microsoft's Project Perception aims to enhance security for AI agents by implementing continuous risk adaptation and containment strategies. As AI agents increasingly integrate into...

Ransomware operators exploit PAN-OS CVE-2026-0257, targeting GlobalProtect VPN access

Dark Watch
Palo Alto Networks' Unit 42 has reported ongoing exploitation of the PAN-OS vulnerability CVE-2026-0257 by ransomware operators, including groups identified as Spikey Scorpius (also...

Top five initial access threat vectors identified by Unit 42 in September 2026

Features
In September 2026, Unit 42 Threat Intelligence identified five primary initial access vectors that underscore the evolving tactics of cyber adversaries. The report highlights...

MITRE ATT&CK v20 adds techniques for AI abuse, MFA bypass, and water utility attacks

Dark Watch
MITRE recently unveiled version 20 of its ATT&CK framework, introducing significant updates that encompass techniques for AI abuse, multi-factor authentication (MFA) bypass, and attacks...
rec5

ARMORY CASTLE exploits CVE-2026-102764 in BeyondTrust Remote Support for persistent access

Features
On October 15, BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, affecting its Remote Support appliances, a tool widely used for secure remote access and troubleshooting....

Moscow police arrest three suspected DataSuckers hackers linked to Dodo Pizza breach

Dark Watch
Russian authorities have detained three suspected members of the DataSuckers hacking group in connection with a cyberattack on Dodo Pizza, a popular restaurant chain....

FortiManager fgfmd daemon vulnerable to OS command injection (CVE-2026-XXXX)

Resources
FortiManager's fgfmd daemon has been identified as vulnerable to an OS command injection flaw (CVE-2026-XXXX), which could allow remote attackers to execute unauthorized commands....

CyberXero targets Ukrainian energy infrastructure with AI-augmented automated attacks, exposing data of over 628,000 individuals

Features
CyberXero, an AI-augmented initial access broker, has been identified as a significant threat to Ukrainian energy infrastructure, employing automated attacks that have compromised the...

Multiple RabbitMQ Server vulnerabilities reported affecting Ubuntu LTS versions

Resources
Multiple vulnerabilities have been identified in RabbitMQ Server affecting various Ubuntu LTS versions, including 18.04, 20.04, 22.04, 24.04, and 26.04. These vulnerabilities could allow...

CrowdStrike assists FBI in disrupting FAMOUS CHOLLIMA’s U.S. laptop farm operations

Features
In late September 2026, CrowdStrike's Counter Adversary Operations team collaborated with the FBI to disrupt a network of laptop farms operated by the North...
rec5
123...34Page 2 of 34

Recent articles

spot_img