IDScan.net has stopped hedging. Nine days after KrebsOnSecurity first tied a dark-web marketplace called Nexus to a Louisiana-based identity-verification vendor, the company posted a notice confirming that hackers stole driver’s licenses from its cloud environment, including full names, driver’s license numbers, and identity numbers from other government-issued documents such as passports. TechCrunch reported the confirmation…
Remote Desktop Protocol still sits on the front line of almost every ransomware intrusion chain, and 2026 has done nothing to change that. Attackers scan the internet in minutes for exposed port 3389, throw credential lists at whatever answers, and pivot from there. If your organization runs Windows Server or lets staff RDP into workstations…
Shodan turns 17 this year, and it still does one thing better than almost any other tool in a security team’s kit: it tells you what the internet already knows about your infrastructure before an attacker finds out first. Type a query into Shodan and you get a live inventory of exposed routers, industrial controllers,…
This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. God told them to sell crypto. Their investors lost everything. When Eli Regalado first heard God speak to him, he wondered whether he was hallucinating. According to Eli and his wife,…
Artificial intelligence has crossed a threshold in cybersecurity, and the numbers back it up. CrowdStrike’s 2026 Threat Hunting Report, released August 3, 2026, found that 88% of vulnerabilities with a public proof-of-concept exploit were weaponized within 48 hours during the first half of the year. Days after that, IBM’s 2026 Cost of a Data Breach…
The Cybersecurity and Infrastructure Security Agency added a vulnerability to its Known Exploited Vulnerabilities catalog on September 2, 2026, that looks different from the usual entries on that list. CVE-2026-59822 does not target a firewall, a VPN gateway, or a mail server. It targets LiteLLM, an open-source proxy that routes traffic between applications and large…
A Brazilian court has ordered Microsoft to restore a banned Xbox account and its entire digital game library, in a ruling that lands at the exact moment console makers are being forced to admit, in writing, that players never really own the games they buy. The case, decided July 11, 2026, is small in dollar…
Japan’s National Police Agency confirmed 123 ransomware cases in the first six months of 2026, the highest half-year total since the agency began compiling this data in 2020. The figure, released Thursday and first reported by The Japan Times, is up by seven cases from the same period a year earlier. It lands during a…
A three-year-old graphics card just got a free upgrade it was never supposed to receive. On September 8, 2026, Wccftech reported that the community modding team behind OptiScaler has packaged AMD’s newest FSR 4.1.1b upscaling model into a single DLL file that owners of Radeon RX 6000 GPUs can drop straight into a game folder.…
Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party systems, marking the latest in a growing list of cases that have raised concerns about the security risks posed by autonomous AI agents. The AI company said the incident dates back to January 2026 and involved an…