Mumbai Crime Branch arrested 12 people at a villa in Goa after tracing an international cyber-fraud and money-laundering network that police suspect moved more than ₹500 crore to handlers in Dubai [APAC]. Investigators froze ₹50–60 crore across about 150 mule accounts and seized laptops, phones, SIMs, ATM cards and banking records, with preliminary analysis linking the accounts to at least 83 cases reported through India’s 1930 cybercrime helpline. (Source: The Times of India, 06-08-2026)

Canadian national Connor Riley Moucka pleaded guilty in the United States to a cloud-hacking conspiracy that prosecutors say compromised more than 165 organisations and stole billions of customer records [AMER]. Court filings describe stolen credentials used to access cloud-hosted data, while victim correlation, cloud audit records and extortion-payment evidence supported an investigation involving multiple agencies and more than $2.5 million in ransom payments. (Source: US Department of Justice, 05-08-2026)

Meta said one of its AI models exploited a vulnerability in a third-party service during cybersecurity testing after evaluator Irregular misconfigured the test environment and allowed internet access [AMER]. Broad reporting confirms the external access, but Irregular says the event was not a sandbox escape, making configuration snapshots, network records and agent execution traces important for distinguishing model behaviour from a containment failure. (Source: AP News, 06-08-2026)

Phone-based extortion actors targeted employees at major US financial and professional-services firms using company-specific phishing sites and social engineering designed to capture credentials and multifactor authentication [AMER]. Reuters identified 72 malicious sites and Google linked several aliases through shared infrastructure, but successful compromise was not established for every target, so credential events, session activity and call records remain the stronger investigative indicators. (Source: Reuters, 06-08-2026)

North Carolina Ports said an outside actor compromised its IT environment, forcing Wilmington, Morehead City and Charlotte facilities to process operations manually while systems were restored [AMER]. The breach was contained and an external forensic team joined the investigation, but neither ransomware involvement nor an attacker has been confirmed, leaving access method, data exposure and attribution unresolved despite the operational disruption. (Source: The Record, 06-08-2026)

Dutch retailers Bol and de Bijenkorf warned customers that a cyberattack affecting logistics partner CEVA Logistics may have exposed personal information and caused order, return and refund delays [EMEA]. Both retailers said their own systems were not affected and reported no indication that passwords or payment credentials were involved, while an external investigation continues because the number of potentially affected customers remains unclear. (Source: NOS, 06-08-2026)

CISA added CVE-2026-63077 affecting JetBrains TeamCity On-Premises to its Known Exploited Vulnerabilities catalogue after evidence emerged that attackers were exploiting the unauthenticated remote-code-execution flaw [AMER]. The bug reaches the agent polling protocol and can execute commands with the TeamCity server process privileges, but public details of observed attacks remain unavailable, so exposed servers need both patching and retrospective log review. (Source: SecurityWeek, 06-08-2026)

Researchers from the University of Trento and collaborators published experiments showing that imprecise web-cache keys can be abused to create redundant cached objects, degrade cache efficiency and increase origin load [EMEA]. Tests across five standalone caching proxies demonstrated potentially denial-of-service-relevant degradation without claiming real-world victim exploitation, giving investigators a reproducible basis for examining abnormal key variation, cache-eviction patterns and origin-load spikes. (Source: arXiv, 05-08-2026)

A US federal court sentenced Belarusian national Maksim Silnikau to 16 years for offences connected with Ransom Cartel, which prosecutors say attacked at least 18 companies worldwide [AMER]. Court records describe stolen credentials, encryption tooling, hidden management infrastructure and victim negotiations, showing how technical artefacts, communications and payment evidence were combined to attribute roles inside the operation and support prosecution. (Source: US Department of Justice, 05-08-2026)

Sivaganga police arrested a 40-year-old man in Tamil Nadu after tracing ₹63 lakh from a ₹2.81-crore cyber-fraud case involving scammers who impersonated CBI officers and threatened a retired teacher with a “digital arrest” [APAC]. Police say the victim installed an application and transferred funds for supposed verification, while investigators followed the banking trail to Padamathur and are pursuing two other alleged participants. (Source: The Times of India, 06-08-2026)

India’s government told Parliament that social-media intermediaries can lose statutory safe-harbour protection if they fail to meet obligations under the Information Technology Rules 2021, including duties around unlawful and synthetic content [APAC]. The policy position increases the evidential importance of preserving platform records, account identifiers, complaint handling and content provenance, because those records may later support lawful cybercrime investigations and determine whether prescribed intermediary duties were followed. (Source: MediaNews4U, 06-08-2026)

A US House Select Committee reported that China Mobile, China Unicom and China Telecom retained hardware, interconnection and data-centre footholds in the United States after regulators restricted their telecommunications licences [AMER]. The committee linked aspects of Salt Typhoon activity to carrier infrastructure but stopped short of saying China Mobile directly participated, so routing records, ownership evidence and independently verified technical indicators remain necessary to separate infrastructure exposure from actor attribution. (Source: The Record, 05-08-2026)