cybercory.com by Sainttly Group

07/09/2026

MikroTik RouterOS Vulnerabilities Are Now Being Exploited – Update Your Routers Immediately

MikroTik urges users to upgrade RouterOS as security researchers confirm active exploitation of vulnerabilities that can expose internet-facing routers to full compromise.

MikroTik’s latest RouterOS security update has taken on a new urgency. What initially appeared to be an important but largely precautionary update has now been linked to active attacks against internet-accessible devices, according to CERT Polska. The vulnerabilities, tracked collectively as “MikroTrick,” can allow attackers to bypass SSH authentication and escalate privileges to full administrative control on vulnerable routers.

https://cybercory.com/2026/09/07/mikrotik-routeros-vulnerabilities-are-now-being-exploited-update-your-routers-immediately/

01/09/2026

AWS Root Accounts Targeted in Password-Spraying Campaign Across More Than 150 Organizations

A newly uncovered campaign has put one of the most powerful identities in the cloud directly in attackers’ sights.

Attackers are increasingly targeting the most powerful identities in cloud environments. A newly uncovered campaign targeting AWS root accounts is a timely reminder that privileged access remains one of cybersecurity’s most valuable – and vulnerable – targets.

Attackers are increasingly targeting the most powerful identities in cloud environments. A newly uncovered campaign targeting AWS root accounts is a timely reminder that privileged access remains one of cybersecurity’s most valuable - and vulnerable - targets. Security researchers at Datadog Secur...

25/08/2026

When Trust Becomes the Payload: Cato Networks CTRL Unmasks Fake Codex ClickFix Campaign Targeting macOS Users

As transitions from standalone productivity assistants to deeply embedded enterprise workflows, actors have adapted their strategies to exploit this new attack surface. Based on intelligence gathered across 6.7 trillion global network flows, this report exposes how shadow , prompt injection, and weaponized extensions are challenging standard defense models and forcing organizations to reimagine .

https://cybercory.com/2026/08/25/when-trust-becomes-the-payload-cato-ctrl-unmasks-fake-codex-clickfix-campaign-targeting-macos-users/

24/08/2026

Your Car’s Infotainment System Has Been Hijacked: First-Ever Android Malware Targets Vehicle Head Units

You’re driving to work, your favorite playlist streaming through the car’s speakers, the navigation system calmly directing you through traffic. Everything looks normal. Everything feels normal. But beneath that familiar dashboard interface, something is very, very wrong. Your car’s infotainment system is quietly reporting your device’s unique identifiers to a remote server. It’s downloading encrypted modules in the background. And it’s turning your vehicle’s internet connection into a node in a global proxy botnet all without you ever knowing, and without leaving a single trace on the screen.

You're driving to work, your favorite playlist streaming through the car's speakers, the navigation system calmly directing you through traffic. Everything looks normal. Everything feels normal. But beneath that familiar dashboard interface, something is very, very wrong. Your car's infotainment sys...

21/08/2026

Pénurie de en en : pourquoi la prochaine génération doit être construite, et pas seulement formée

De quoi l’Afrique a-t-elle réellement besoin pour combler son déficit de compétences en cybersécurité ?

Dans notre nouvelle interview cybercory.com by Sainttly Group, Hervé Bah, CISO®, de Ciberobs - Make Africa Safe Consulting, partage une analyse directe d’un des enjeux majeurs de la sur le continent : développer des professionnels capables d’aller au-delà des certifications et de la théorie pour acquérir une véritable expérience du terrain.

Pour Hervé Bah, CISO®, le problème ne se résume pas au manque de formations. Le véritable défi réside également dans le manque d'opportunités pour les juniors, d’expérience pratique, de mentorat et de perspectives d’évolution.

Les entreprises recherchent souvent trois à cinq années d’expérience pour des postes pourtant présentés comme juniors, créant ainsi un cercle difficile à briser pour les jeunes professionnels.

Mais derrière ce défi se trouve également une formidable opportunité : l’Afrique peut développer une expertise cybersécurité reconnue à l’échelle mondiale, notamment dans des domaines tels que le paiement mobile, les services financiers numériques et la sécurisation d’environnements technologiques avec des ressources limitées.

Aux jeunes qui souhaitent se lancer dans la , son message est clair : commencez, pratiquez, apprenez à bien communiquer, recherchez le mentorat, construisez votre carrière sur l’éthique et soyez constants.

Aux et aux , le message est tout aussi important : développer les talents nécessite d’investir dans les premiers emplois, l’expérience pratique et les parcours professionnels à long terme, pas uniquement dans la formation.

👉 Lisez l’interview complète d’Hervé BAH sur :

« La pénurie de talents en en Afrique : développer les compétences africaines »

📖 Lisez. Apprenez. Partagez.:https://cybercory.com/2026/08/20/interview-global-cyber-leadership-series-bridging-the-talent-gap-in-africa/

Suivez CyberCory pour découvrir davantage d’interviews, d’analyses et de perspectives de leaders de la cybersécurité en Afrique et au Moyen-Orient.

20/08/2026

’s_Cybersecurity Talent Gap: Why the Next Generation Must Be Built, Not Just Trained

What does Africa really need to close its cybersecurity skills gap?

In our latest CyberCory interview, Hervé Bah, CISO®, of Ciberobs Consulting, shares a candid perspective on one of the continent’s most critical cybersecurity challenges: developing professionals who can move beyond certifications and classroom knowledge into real-world security environments.

argues that the problem is not simply a lack of . The bigger challenge is the lack of junior opportunities, practical experience, mentorship and career progression. Too often, organisations ask for three to five years of experience for entry-level roles, creating a cycle where young professionals cannot gain the experience employers demand.

He also highlights the opportunity behind the challenge: can develop globally relevant cybersecurity expertise, particularly in areas such as mobile payments, digital financial services and securing technology environments with constrained resources.

For young professionals, his message is simple: start, practise, learn to communicate clearly, seek mentorship, build ethical foundations and stay consistent.

And for organisations and governments, the message is equally important: talent development requires investment in first jobs, practical exposure and long-term career pathways, not training alone.

👉 Read the full interview with Hervé Bah, CISO® on cybercory.com by Sainttly Group:

“Cybersecurity Talent Shortage in Africa: Developing the Skills Africa Needs”

📖 Read. Learn. Share.

Follow CyberCory for more interviews, insights and perspectives from cybersecurity leaders across Africa and the Middle East.

https://cybercory.com/2026/08/20/interview-global-cyber-leadership-series-bridging-the-talent-gap-in-africa/

18/08/2026

The “City-Forum” Campaign: Advanced Attacker Exploits and ServiceNow Guest Access in Unprecedented Multi-Platform Assault

New research reveals sophisticated threat actor has been systematically extracting data from enterprise platforms since March 2025 using custom-built tools and undocumented techniques

For over seventeen months, a single server has been quietly pulling sensitive records from Experience sites and ServiceNow Service Portals across the globe. The attacker didn’t breach firewalls, exploit zero-day vulnerabilities, or crack complex passwords. They simply logged in as a guest.

For over seventeen months, a single server has been quietly pulling sensitive records from Salesforce Experience Cloud sites and ServiceNow Service Portals across the globe. The attacker didn't breach firewalls, exploit zero-day vulnerabilities, or crack complex passwords. They simply logged in as a...

13/08/2026

U.S. Expands Cyber Arsenal: White House Opens New Front Against Transnational Cybercrime

Presidential memorandum gives vetted U.S. cybersecurity companies a government-controlled role in cyber surveillance and disruption operations against foreign cyber-enabled criminal organizations.

The United States is taking a significant step toward bringing private-sector cybersecurity capabilities directly into the government’s fight against transnational cybercrime.

https://cybercory.com/2026/08/13/u-s-expands-cyber-arsenal-white-house-opens-new-front-against-transnational-cybercrime/

12/08/2026

Zoomsday: AI Turns a One-Day Security Research Sprint Into a Wake-Up Call for the Cybersecurity Industry

A critical vulnerability in Zoom has exposed a disturbing new reality for cybersecurity teams: sophisticated exploit research is becoming faster, cheaper and more accessible with the help of artificial intelligence.

Security researchers at A Security say they discovered a set of critical vulnerabilities in Zoom’s annotation engine that could allow a malicious meeting participant to remotely execute code on another participant’s device without requiring the victim to click a link, download a file or take any other action.

Security researchers at A Security say they discovered a set of critical vulnerabilities in Zoom's annotation engine that could allow a malicious meeting participant to remotely execute code on another participant's device without requiring the victim to click a link, download a file or take any oth...

11/08/2026

: , .

In this interview, Yannick KPAKI-EMILE, Security Capabilities Manager & at Services, shares his vision on the evolution of , the impact of , and the challenges of across the continent.

We covered:
✅ The maturity level of SOCs in
✅ The tangible impact of AI on threat detection
✅ How to attract and train local
✅ A 2030 vision for a high-performing and sovereign ecosystem

A must-read for CISOs, CIOs, and security leaders.

🔗 Link to the full article: https://lnkd.in/gEpq8aEW