EvilTokens takedown shows why cybercrime platforms are getting harder to stop

blog.barracuda.com Oct 1, 2026

EvilTokens takedown shows why cybercrime platforms are getting harder to stop

Curated by Shubham · TechCapsules · Oct 1, 2026

AI-summarised brief · reviewed before publication

Microsoft shut down the EvilTokens phishing-as-a-service platform after discovering it had compromised over 12,000 Microsoft 365 inboxes in more than 10,000 organizations worldwide. The service exploited device‑code phishing, abusing legitimate OAuth flows to bypass multi‑factor authentication. The takedown highlighted that cybercriminals can rapidly rebuild infrastructure using AI coding tools and inexpensive blockchain‑based services, making individual platform disruptions less effective. Coordinated, ecosystem‑wide action is now required to achieve lasting disruption.

💡 Why It Matters

· The incident demonstrates that cybercrime operations can outpace traditional law‑enforcement responses, underscoring the need for proactive, collaborative defenses that target the underlying tools and infrastructure rather than isolated services.

Read full article on blog.barracuda.com

Elder fraud is rising – here’s how to protect your family

Elder fraud is escalating in the U.S., with 72% of 2024 cases driven by online exposure of seniors’ personal data, costing $4.2 billion. Scammers exploit family chat updates and SIM‑swap tactics to hijack phone numbers, intercept two‑factor authentication codes, and infiltrate encrypted messaging groups. They then use deep‑fake audio to impersonate relatives. Incogni offers data‑removal services, while experts recommend enabling app‑based 2FA, cross‑checking contacts through alternate channels, and establishing a secret family password.

💡 The rise of SIM‑swap scams shows that even end‑to‑end encrypted chats are vulnerable when attackers control the victim’s phone number. Protecting seniors now requires proactive data‑cleaning, stronger authentication, and multi‑channel verification.

all-about-industries.com · Sep 30

Cybersecurity as a Tool of Trade Policy

Geopolitical tensions have elevated cybersecurity to a central trade policy issue as the United States, China and Europe invoke security risks to justify technology restrictions. Ahead of a September 2026 summit between President Donald Trump and President Xi Jinping, the U.S. proposed a bilateral mechanism for sharing information on serious AI‑related security incidents, signaling that artificial‑intelligence threats now shape diplomatic and economic agendas. Recent cyber‑espionage campaigns illustrate the stakes: U.S. agencies disclosed the Volt Typhoon group’s five‑year infiltration of energy, water and telecom networks; a multinational warning in August 2025 linked Salt Typhoon to global telecom attacks; and a later NSA‑FBI report accused QTFY of targeting U.S. government and critical‑infrastructure sites, though some breach claims were later retracted. The convergence of AI, chip supply concerns and state‑backed hacking underscores a new era where cyber defenses drive trade negotiations.

💡 Nations are weaponising cyber‑risk assessments to reshape market access, turning digital vulnerability into a lever for economic leverage.

cleantechnica.com · Sep 30

Norway Found A Real Bus Cyber Risk. It Didn’t Show It Was…

Norway’s transit authority Ruter tested a Chinese Yutong electric bus for cybersecurity vulnerabilities. The investigation revealed a real remote‑access path that could potentially disrupt bus operations, but no evidence that the bus could serve as a covert surveillance platform near the intelligence agency’s Lutvann facility. A 2022 European VDL bus, with limited connectivity, showed no such access. The comparison could not attribute the risk to the bus’s Chinese origin, as the control vehicle lacked comparable technology. The findings highlighted the need for clearer controls on manufacturer‑controlled connectivity.

💡 The study underscores that remote‑diagnostics in modern buses can pose operational risks regardless of manufacturer origin. It calls for stricter oversight of connectivity features in public transit vehicles.

quantumcomputingreport.com · Sep 30

Quantum eMotion to Acquire Plurilock for C$33.8M ($23.8M USD) to Commercialize Quantum-Safe…

Quantum eMotion Corp. has agreed to acquire Plurilock Security Inc. for about C$33.8 million (US$23.8 million). The deal, approved by court, gives Quantum eMotion an established enterprise customer base and public‑sector procurement channels in Canada, the U.S., and NATO. Plurilock shareholders receive C$0.084 cash and 0.0763 QeM shares per share, a 100 % premium over the 20‑day VWAP. The transaction is 30 % cash, 70 % equity, and includes a C$2 million bridge loan at 8.5 % interest. The merger will combine Quantum eMotion’s quantum random number generation hardware with Plurilock’s AI‑driven risk‑analysis engines to deliver adaptive access control for defense, healthcare, and critical infrastructure.

💡 The acquisition merges quantum‑generated entropy with AI‑driven cybersecurity, creating a first‑of‑its‑kind platform for dynamic key management in high‑security sectors. It positions Quantum eMotion to accelerate deployment of quantum‑safe solutions across government and defense networks.

thehackernews.com · Sep 29

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven…

An attacker exploited stolen staff passwords to access France’s tax administration data, extracting information on roughly 350,000 individuals and 250,000 businesses between June and July. The breach went unnoticed for seven weeks, revealing weaknesses in login protection, network segmentation, and monitoring. The stolen data included tax IDs, contact details, income references, and message logs, but not taxpayers’ own online credentials. The incident was disclosed after the attacker posted claims online, prompting an ANSSI audit and a ministry review of security protocols.

💡 The breach exposes systemic gaps in government cybersecurity, undermining public trust in digital tax services and highlighting the need for stricter access controls and real‑time threat detection.

helpnetsecurity.com · Sep 29

Hottest cybersecurity open-source tools of the month: September 2026

The September 2026 roundup from Help Net Security highlights six open‑source cybersecurity tools gaining traction. Sift, created by Stratus Security, is a command‑line scanner that locates passwords, API keys and other secrets across Microsoft 365, Slack, Jira, SharePoint, OneDrive, local disks and Active Directory domains. ToolHive, released by Stacklok under Apache 2.0, enables secure self‑hosting of Model Context Protocol (MCP) servers in containers with a Kubernetes operator and registry. Tencent’s Zhuque Lab contributes AI‑Infra‑Guard, a scanner that fingerprints AI services such as Ollama, vLLM and ComfyUI, cross‑referencing them with over 1,600 CVEs and testing for jailbreak vulnerabilities. Permify offers a centralized, runtime authorization‑as‑a‑service to evaluate access decisions outside application code. DeepZero automates hunting for exploitable Windows kernel drivers by parsing binaries and consulting language models for attack feasibility. Finally, Gopass provides a command‑line password manager for teams, positioned as a drop‑in replacement for the Unix “pass” utility.

💡 By delivering free, community‑maintained solutions for secret discovery, AI risk assessment, and access control, these tools lower the barrier for organizations of any size to harden their attack surface without costly proprietary software.