Cybersecurity Roundup: Major Arrests, AI Advances and Critical Vulnerabilities - May 18, 2026

Key points

• •INTERPOL's Operation Ramz successfully disrupted major cybercrime networks across 13 Middle Eastern and North African countries between October 2025 and February 2026, resulting in 201 arrests and 382 suspects identified. This large-scale international effort marks one of the most extensive crackdowns on cybercriminal activities in the region, reflecting heightened global cooperation against cyber threats.[The Hacker News RSS]
• •In 2025, cyber attacks inflicted substantial financial damage on UK businesses, with litigation costs reaching £3.7 billion. This significant economic impact underscores the growing threat cybercrime poses to companies, prompting increased attention to cybersecurity risk management and incident mitigation within the UK.[UKTN][UKTN]
• •Critical vulnerabilities discovered in widely used enterprise software products led to urgent patch releases from vendors including Ivanti, Fortinet, SAP, VMware, and n8n. Notably, the Ivanti Xtraction vulnerability (CVE-2026-8043) scored 9.6 on the CVSS scale, indicating a severe remote code execution risk that could be exploited by attackers if left unpatched.[The Hacker News RSS]
• •A severe security incident occurred when a CISA contractor accidentally exposed high-level AWS GovCloud credentials on a public GitHub repository, potentially compromising sensitive government cloud environment security. This leak highlights the continuing dangers of credential exposure and the need for stringent insider security controls in vital infrastructure sectors.[Krebs on Security RSS]
• •Leveraging AI advancements, SailPoint introduced 'Agentic Fabric,' a novel cybersecurity platform aimed at enhancing identity governance and automating security operations. This initiative marks a significant step toward integrating artificial intelligence into enterprise-level cyber defense tools to counter increasingly complex threats.[Cyber Magazine]
• •Anticipating potential cyber threats to the global FIFA 2026 event, cybersecurity experts have raised alarms regarding risks to critical infrastructure and sensitive data. They emphasize the urgency of implementing robust cybersecurity measures to safeguard the tournament against cyberattacks and protect millions of stakeholders.[EasternEye][EasternEye]
• •Japan is set to enhance national cybersecurity measures by introducing new regulations deploying advanced AI for vulnerability detection and response during 2026. This proactive approach aims to bolster cyber defenses by harnessing cutting-edge AI capabilities to identify and remediate system weaknesses promptly.[marketscreener.com][nhk.or.jp]
• •The threat group Tycoon2FA has developed a sophisticated attack method using stealth device-code phishing to hijack Microsoft 365 accounts, evading traditional multi-factor authentication barriers. This advanced phishing technique represents an evolution in cyberattack strategies, raising concerns about the effectiveness of current security protocols.[Escudo Digital][Escudo Digital]
• •The Mini Shai-Hulud campaign by the TeamPCP group compromised the TanStack npm software supply chain by injecting malicious code into packages, highlighting vulnerabilities in developer ecosystems. This supply chain attack underlines the importance of securing open-source software dependencies against infiltration by threat actors.[Cyber Magazine][Reddit /r/netsec]
• •Security researchers disclosed a zero-day Windows vulnerability named MiniPlasma, which permits SYSTEM-level privilege escalation even on fully patched systems. This flaw presents a critical risk to Windows security, demonstrating that emerging exploits continue to challenge established security defenses.[The Hacker News][Forbes]

Relevant articles