The Good, the Bad and the Ugly in Cybersecurity – Week 26

This intelligence roundup details coordinated takedowns of malware-as-a-service infrastructure (Amadey/StealC) and seizure of ~27M stolen credentials and $47M in cryptocurrency, a DPRK-linked macOS infostealer (macOS.Gaslight) that weaponizes prompt-injection to disrupt LLM-assisted analysis, and active exploitation of critical Cisco vulnerabilities (CVE-2026-20230 and CVE-2026-20245) enabling root access and stealthy persistence — highlighting widespread criminal operations, nation‑state tooling, and high-risk, actively exploited flaws.