Intensified enforcement against online scam operations in Cambodia is displacing criminal networks to Sri Lanka, where authorities have arrested over 1,000 people in 2026.
Sri Lankan law enforcement has ramped up operations targeting relocated scam gangs, with arrests exceeding 1,000 individuals this year. The gangs have set up operations in beach resorts and office buildings across the country, exploiting the shift in enforcement priorities.
Cambodia's sustained crackdown on scam compounds—which proliferated in recent years—has made the country less hospitable for large-scale fraud operations. The displacement reflects a broader pattern of criminal activity migrating to jurisdictions with weaker enforcement capacity or regulatory gaps.
Sri Lankan authorities say the arrested individuals were involved in online fraud schemes targeting victims globally. The country's tourism infrastructure and relatively loose business registration requirements have made it an attractive alternative for networks previously based in Cambodia.
The shift highlights challenges in combating transnational cybercrime, where enforcement in one region simply redirects criminal activity elsewhere rather than eliminating it entirely. Regional coordination between law enforcement agencies remains limited.
A race condition vulnerability in the Linux kernel's XFS filesystem allows local attackers to overwrite protected files and gain root privileges. The flaw, tracked as CVE-2026-64600, has remained unpatched for nine years.
Offensive cybersecurity researchers report that safety guardrails from OpenAI and Anthropic are restricting their ability to find vulnerabilities and develop security tools. The limitations are creating friction for legitimate security work.
European drug traffickers are leveraging AI-boosted chemical synthesis to create designer drug precursors that circumvent existing product blacklists, according to an EU agency warning.
Domain registrar Namecheap handed over a customer's account to an unverified third party after a password reset request, raising security concerns for a 13-year customer.