Cybercrime exploited mainstream infrastructure as defenders pushed back

Summary

Paid ads on Instagram in India promoted child sexual abuse material using explicit keywords like “rape” and “child video” and directed users to channels on Telegram where the content was available. The ads appear to have passed platform ad review and were served to users as normal sponsored posts.

Why it matters

When CSAM promotion can be bought through mainstream ad systems, the platforms become scalable infrastructure for abuse and invite immediate legal and regulatory escalation.

Summary

The FBI, working with industry partners, seized hundreds of domains tied to NetNut, a large residential proxy service run by Alarum Technologies. The move follows reporting and security firm findings linking NetNut infrastructure to the Popa botnet, which includes at least two million compromised devices.

Why it matters

Residential proxy platforms built on coerced or infected endpoints are a force multiplier for cybercrime, and domain seizures can temporarily blunt that scale.

Summary

Visa launched a threat intelligence platform aimed at helping financial institutions detect and respond to cyber threats. It also executed agentic commerce transactions with banks across Europe, testing automated purchase flows driven by AI agents.

Why it matters

As AI-driven payments scale, the winners will be the networks and institutions that can pair automation with provable controls and shared threat intelligence.

Summary

Visa launched the Visa Threat Intelligence Platform to let financial institutions use the same threat detection and cyber defense capabilities Visa uses to protect its own network. The product is positioned to help banks identify cyberthreats earlier and reduce fraud by treating it as a downstream effect of cyber incidents.

Why it matters

If banks can detect intrusions earlier using Visa-grade intelligence, fraud losses and incident costs can move down, and threat intel becomes more centralized around network operators.