Advertisement
Dark Web Service Nexus Sells 153M+ Driver Licenses
A new dark web service, Nexus, is selling over 153 million drivers' licenses from North America, likely sourced from an identity verification company.
Unlimited Technology Systems Data Breach Exposes 3.8M Records
Unlimited Technology Systems disclosed a data breach exposing PII and PHI of 3.8 million individuals, including Social Security numbers.
OAuth 2.0 Device Code Phishing Escalates to Industrial Threat
Device code phishing, exploiting the OAuth 2.0 device authorization grant, is rapidly stealing access tokens. Learn how to defend against this growing threat.
Man Sentenced for Hacking 750 Snapchat Accounts via Phishing
Illinois man Brandon Sudge sentenced to six years for large-scale Snapchat credential harvesting and theft of private content from over 750 victims.
Upbound Group Breach: $13 Million Loss via Acima Lease Fraud
Upbound Group discloses a massive data breach involving Acima customer data, resulting in $13 million in fraudulent leases and significant identity theft.
Email Account Takeover via 2FA Compromise: Mitigating Identity Theft Risk
An identity theft incident highlights how easily email account takeover via compromised 2FA can lead to broader security breaches. Learn to protect your digital identity.
Advertisement
Scattered Spider Sentencing: Analysis of the £29M TfL Breach
Two Scattered Spider members sentenced for the 2024 TfL breach, costing £29 million and disrupting 148 systems. Learn about their TTPs and recovery costs.
Texas Data Breach Exposes 3M Driver's Licenses via Vendor
A data breach at a third-party vendor of the Texas Parks and Wildlife Department exposed over 3 million driver's licenses, impacting Texans' PII.
University of Nottingham Data Breach: 450,000 Student Records Exposed
Nottingham University confirms a data breach affecting over 450,000 students and alumni. Analyze the risks of identity theft and targeted phishing campaigns.
WFP Palestine Breach: 600,000 Gaza Households' Data Exposed
The UN World Food Programme confirms a data breach in its Palestine registration portal, exposing sensitive data for 600,000 households in the Gaza Strip.
French and Spanish Police Dismantle Major Fake ID Marketplace
Authorities dismantle a sophisticated marketplace supplying high-quality fraudulent identity documents to smuggling networks across the European Union.
Dashlane Brute-Force Attack: Mitigation for Stolen Encrypted Vaults
Dashlane confirms a brute-force attack where fewer than 20 personal vaults were downloaded. Analyze the technical impact and mitigation strategies for users.
Google Chrome DBSC: Preventing Account Takeover via Cookie Theft
Google Chrome rolls out Device Bound Session Credentials (DBSC) to protect users from session hijacking by cryptographically binding cookies to hardware.
FBI Warning: Fake FIFA World Cup Sites Target Fans with Fraud
FBI warns of fraudulent websites impersonating FIFA for the 2026 World Cup, engaging in data theft, fake ticket sales, and hospitality scams.
Carnival Data Breach: 6 Million Customer Records Exposed
A data breach at Carnival Cruise Line exposed personal information for nearly 6 million customers, raising significant identity theft risks.
Romanian Hacker Sentenced for Breach of Oregon Government Networks
Adrian-Tiberiu Oprea sentenced to 56 months for a multi-year cyber campaign targeting Oregon government systems and dozens of U.S. organizations.
Ajax Football Club Hack: Suspect Arrested in Almere Data Breach
Dutch police arrested a 35-year-old suspect linked to the AFC Ajax data breach involving the theft of sensitive personal data of players and staff.
7-Eleven Data Breach: 185,000 Records Leaked by ShinyHunters
Analysis of the 7-Eleven data breach involving threat actor ShinyHunters, impacting 185,000 users and exposing sensitive PII including dates of birth.
Cyber-Enabled Cargo Theft: How Phishing and Identity Theft Hijack Freight
Cyber-enabled cargo crime leverages stolen credentials and phishing to reroute freight, replacing traditional hijackings with digital fraud and identity theft.
Gavril Sandu Extradited to US for Historical Phishing Scheme
Gavril Sandu, a Romanian national, faces US charges for a 2007-2008 phishing operation that targeted financial institutions and thousands of victims.
FBI Warning: Cyber-Enabled Cargo Theft Losses Surge to $725 Million
FBI alerts logistics firms to a massive rise in cyber-enabled cargo theft involving identity theft and fraudulent carrier profiles. Protect your supply chain.
Roblox Account Hijacking: 610,000 Accounts Compromised and Sold
Ukrainian police arrested a group for hijacking 610,000 Roblox accounts and generating $225,000 in profits through illegal sales of user data.
Detecting and Mitigating Money Mule Accounts to Prevent APP Fraud
Learn how intelligence-driven mule account detection disrupts the fraud ecosystem and prevents Authorized Push Payment losses before funds are exfiltrated.
France Titres Data Breach: Identity Documents Stolen by L33T Hacker
France Titres confirms a data breach after threat actor L33T claims to have stolen 400,000 files, including identity document scans and personal citizen data.