Secretariat

CyberStrike is a free, open-source AI agent for offensive security that pairs any LLM with 56+ tools, including a 40,000-line Windows post-exploitation module. A source-code reading of commit a5ed1e0 (v1.1.16) shows every Windows action runs through five fixed wrappers after a hard-coded five-process capability probe, leaving default cs-* and CyberStrike* artefacts. Includes Sigma, Suricata, YARA and KQL detections and a response playbook.

Online gaming, deepfakes of prominent figures, threats to sovereignty and integrity, gender-based harassment and promoting enmity between groups drove Meta to restrict over 5.4 million items in India in January–June 2026. Meta said most were automated restrictions, including identical copies, required by the amended IT Rules. India has 403 million Facebook users and 481 million on Instagram.

Canada's Anti-Fraud Centre and the RCMP's National Cybercrime Coordination Centre have launched Maple Disruption 2.0, running November 2–6, 2026. More than 50 partners from police, banks, telecoms, tech, crypto and regulators are working to disable malicious emails, phone numbers, bank and crypto accounts, and fraud websites. That is double the first sprint, which took 3,021 actions in December 2025.

Microfinance lender Spandana Sphoorty Financial has disclosed that about Rs 7.80 crore was moved from one of its bank accounts to 82 beneficiary accounts on 1 November 2026. It shut down the affected production services, sought reversal and freezes, filed a complaint on 1930 and is claiming under its cyber fraud insurance. Here is what the case means for lenders relying on cyber cover.

Pimpri Chinchwad Cyber Police have arrested Sumant alias Nanu Ravindra Dasre, 26, of Pune, who allegedly ran cyber frauds from Dubai in partnership with Chinese cybercriminals. A Look Out Circular got him detained in Dubai through Interpol and deported, and he was arrested at Mumbai airport. Police say he used over 150 bank accounts supplied by two Pune associates and earned more than Rs 1 crore.

Thailand's Cyber Police Bureau is turning to short-form video for scam prevention. In a Facebook reel posted on 1 November 2026, Police Lieutenant Bunthrika "Som-O" Thong-in of the bureau's Strategy Division warns that tech crime hits every profession and lists five traps, from romance and fake investment schemes to online task jobs, with one rule: think before you transfer.

India and its Quad partners, the US, Australia and Japan, have committed to dismantling the scam centres that steal tens of billions of dollars a year from their citizens and to hold the criminal groups behind them accountable, after the foreign ministers met in Atlanta on 31 October. A day before the US Embassy highlighted the pledge, India's Embassy in Myanmar said 2,533 Indians have been repatriated from scam centres since July 2022.

Lucknow Police have seized six illegal 32-port SIM boxes with 192 SIM slots, along with VPN gateways and smart switches, in raids at four locations under Operation Digital Kavach. Police say such boxes route internet calls through Indian SIMs so they look like local calls, helping digital arrest fraudsters pose as police or CBI officers and hide where the calls really come from.

Google Threat Intelligence Group and Mandiant say threat actors are now using agentic offensive frameworks such as ARTEX and PentAGI in real intrusions, moving from first stolen account to deep access in hours, sometimes 15 minutes. With CERT-In already warning of AI-assisted payment API hijacking at Indian NBFCs and fintechs, here is a checklist built on Google's five defence layers and CERT-In's controls.

Germany's Baden-Württemberg State Criminal Police Office has warned of "cybertrading" fraud, in which fake trading platforms show invented profits and fake advisers push victims into ever larger deposits, then charge fees to withdraw money that was never invested. The warning comes days after a 73-year-old Stuttgart man lost about 250,000 euros to the same kind of scam.

The cyber police unit of Mexico's Michoacán state prosecutor's office has published 14 phone numbers used in calls that threaten people into paying for loans they say they never took. Nine of the numbers are Mexican, three are Colombian and one is Nicaraguan. The pattern matches Mexico's "montadeudas" loan-app extortion.

French police warn that fake letters in the name of France's tax authority, the DGFiP, are using the EU's DAC8 crypto-reporting directive to demand registration on a "Digital Assets Portal" that does not exist. A QR code leads to a cloned site that takes tax logins and then wallet recovery phrases. Tax authorities in the Netherlands and Germany have reported similar DAC8-themed phishing emails.