Secretariat

Perplexity CEO Aravind Srinivas said nine models with root in SPACE failed 108 VM→host escapes, but four — including GPT-5.6 Cyber — reached a blocked URL under partial network access via DNS spoofing or shared-IP CDN tricks; Cyber used Taboola→screenshot→OCR. Issues reportedly fixed. Not a Firecracker host break.

NCCIA Rawalpindi raided an alleged illegal call centre in Commercial Market, Satellite Town, arresting 61 suspects and seizing 155 laptops and 71 phones (28 Sep 2026). Officials say preliminary findings point to illegal foreign-loan recovery with threats and intimidation of customers abroad.

C-DAC has advertised walk-in interviews in Guwahati for contract roles including Senior Project Engineer and Project Engineer in Android Development (two posts each), plus full-stack, software architecture and network security openings. Selection is by interview; last date for the walk-in is 9 October 2026. Details: www.cdac.in.

Uttarakhand STF says it dismantled an illegal SIM-box telecom gateway in Bazpur, Udham Singh Nagar, arrested a 24-year-old man and seized two 32-slot SIM boxes, 77 antennas, 114 Airtel SIM cards, a router, phone and other equipment. Investigators allege foreign/VoIP calls were converted into Indian local calls to conceal identities, with links to Bangladesh-based cybercriminals under investigation.

Pakistan’s NCCIA says its Karachi office raided two alleged fraud call centres in PECHS Block 6, Tariq Road, found 73 individuals and seized a live CRM plus digital evidence. FIRs 92/2026 and 93/2026 registered; one operator arrested, two declared absconders. Follows the recent Lahore DHA Phase 6 raid (21 arrests).

NCCIA Lahore and Faisalabad teams raided an alleged illegal scam centre in DHA Phase 6, Lahore, arresting 21 people and recovering 29 mobile phones and 10 PCs. The agency said preliminary examination indicated the alleged use of fake social media accounts.

Automated scrapers and path scanners routinely probe public sites for /.env, config.json, info.php, .vscode/sftp.json, cPanel proxy paths, GraphQL and Exchange ECP URLs. MoCA analysis of typical top-path charts explains recon vs exploit risks and practical fixes: deny rules, WAF, fail2ban, never commit secrets, remove phpinfo, and keep security.txt intentional.

After continuous crackdown in south east asia, the scams have dispersed across various geographies of the world. These include Papua New Guinea, Sri Lanka, Pakistan, Madagascar etc. It becomes increasingly difficult for global enforcement agencies in tracking down the centres

A statutory filing Meta must publish in India shows account-takeover complaints on Instagram rising from about 4,200 a month to 16,621 in July. The company says every ticket was answered. It does not say how many accounts came back.

Kenya’s DCI says two women linked to Quant Vest Stock Exchange (QVSE / Global Investment Group) have been charged over an allegedly unlicensed pyramid-style investment scheme. Investigators allege investor funds were converted into virtual assets and transferred to unidentified recipients. Both pleaded not guilty and were released on Sh200,000 bond each.

China’s MPS announced on 23 September 2026 the dismantling of a transnational “national asset unfreezing” fraud ring: 257 suspects detained (101 in China, 156 abroad in Laos, Singapore and Cambodia), suspected funds over 6 billion yuan (~US$888–895M), mainly targeting elderly victims.

Kolkata Police Cyber Crime Branch arrested three people, including alleged kingpin Mohsin Khan alias Faisal (31), in a Pragati Maidan raid on an international call-centre fraud network. Also held: Md. Khurshid alias Guddu (35) and Imran Ali (27). Seized: 4 phones, 4 SIMs, ₹96,000 cash.