[AMER] Connecticut officials said an unauthorised party accessed a HUSKY Medicaid provider reimbursement account, exposing information linked to about 41,000 members, including names, claim identifiers, service details and some insurance data. External cybersecurity specialists and law enforcement are investigating the financially motivated intrusion, while officials said Social Security numbers, financial-account details and electronic health records were not exposed. (Source: CT Insider, 22-08-2026)

[AMER] ShinyHunters claimed it breached US security company ReliaQuest after a social-engineering attack exposed an employee identity session, but ReliaQuest said access was view-only and stopped before applications, systems or customer data were reached. The Register reported no published customer data or validated samples, while ReliaQuest said device-trust controls blocked further access and its team terminated the session, expired the password and reset authentication factors. (Source: The Register, 24-08-2026)

[EMEA] Kenyan authorities said a review of 102 computer-fraud cases from February to July found mobile-money services involved in 51 cases, with 19 classified specifically as mobile-money fraud and telecommunications indicators appearing in 23. The National Computer and Cybercrimes Coordination Committee is prioritising faster evidence preservation, escalation with telecommunications providers and stronger intelligence sharing, while separate forensic work continues on a government website defacement. (Source: KBC, 24-08-2026)

[APAC] Police in Lucknow, India, opened two investigations after elderly residents reported losing a combined ₹130 lakh to fraudsters who impersonated investigators and subjected them to prolonged “digital arrest” scams. Officers traced transfers to accounts in Kerala and Punjab and froze ₹20 lakh in one case and ₹22 lakh in the other, providing transaction trails that can support beneficiary-account tracing and identification of the wider fraud network. (Source: The Times of India, 24-08-2026)

[EMEA] The UK government briefed energy-sector leaders after reports that a cyberattack disabled a small British power generator for four days in July, while officials stressed that no grid-wide outage occurred and no customers lost power. Authorities are still assessing the incident, and reports linking the attackers to Iran remain unconfirmed attribution rather than a conclusion publicly supported by disclosed technical evidence. (Source: Reuters, 24-08-2026)

[GLOBAL] Check Point researchers reported that nearly 2,000 compromised WordPress sites had been repurposed as infrastructure for malware delivery, command-and-control and stolen-data handling, with more than 6,000 unique IP addresses appearing in collected logs. Coverage largely traces those figures to the same research, and Check Point cautioned that some logged systems may be sandboxes or researchers, so local exposure requires validation through server, file and endpoint artefacts. (Source: Business Standard, 24-08-2026)

[AMER] CISA ordered US federal agencies to patch actively exploited Zimbra Collaboration vulnerability CVE-2026-73570 by 24 August after CERT Polska documented exploitation and Shadowserver identified more than 270 compromised instances. The command-injection flaw can enable unauthenticated remote code execution when SNMP notifications are enabled, and defenders were advised to examine Zimbra service restarts and files created by the Zimbra user in web and temporary directories. (Source: BleepingComputer, 24-08-2026)

[GLOBAL] SANS Internet Storm Center analysed a DOUBLECUP payload presented as a PNG and found that its PowerShell content was appended after the image rather than encoded within pixels or image metadata. The script begins with carriage-return and newline bytes, allowing Windows FINDSTR to locate a unique text marker and extract the appended script before piping it to PowerShell, giving investigators a specific execution pattern for command-line and file artefacts. (Source: SANS Internet Storm Center, 24-08-2026)

[APAC] West Bengal Police said Operation Cyber Prahar produced 107 arrests across 69 cyber-fraud cases involving losses of about ₹926 million, including action against three alleged illegal call centres and networks using mule accounts, ATMs, point-of-sale devices and SIM outlets. Investigators combined banking and telecommunications evidence to map the activity, while authorities reported deactivating more than 400 SIM cards associated with suspected fraudulent use. (Source: The Times of India, 23-08-2026)

[AMER] A Kansas man pleaded guilty to two counts of producing child sexual abuse material after an undercover investigation led officers to obtain and search his mobile phone. The warrant examination recovered images involving two victims under 14 and messages showing he requested the material while knowing their ages, demonstrating how handset content and communications can establish both conduct and intent in a prosecution. (Source: US Department of Justice, 24-08-2026)

[EMEA] Premier League clubs are now subject to new competition cybersecurity rules covering backups, risk management, incident handling and security assurance, with initial compliance requirements due by 30 April 2027 and later stages extending into 2028 and 2029. The framework gives the league board an enforcement route including fines of up to £100,000 and referral to an independent commission, creating auditable governance obligations around security controls and organisational readiness. (Source: TechRadar, 23-08-2026)

[APAC] Vietnam introduced Decree No 329/2026/NĐ-CP governing specialised cybersecurity personnel in the public-security and national-defence ministries, including monthly allowances of up to 300% for designated roles. The decree also defines responsibilities spanning policy, legal work, data protection and operational cybersecurity, formalising workforce expectations for state cyber functions and creating clearer accountability for personnel entrusted with protecting information systems and handling sensitive security activities. (Source: VnEconomy, 23-08-2026)