Tools

A dark web service called Nexus is selling scans of 153 million North American drivers licenses. Evidence points to a breach at Louisiana-based identity verific

A price-manipulation attack on Tectonic drained $74 million in borrowed assets. Cronos halted and restored the blockchain to a pre-exploit state.

AI tools let cybercriminals profile victims faster and cheaper than ever. Here's what the threat looks like and what you can still control.

A ransomware affiliate called Ransom Busters is charging victims $20,000–$60,000 to delete their stolen data, while posing as a helpful third party.

A free service called DecryptAds scrapes public adtech files to show which companies track users across websites and apps, flagging high-risk ad partners.

Laundry Bear is exploiting a zero-day XSS flaw in Exchange OWA to deploy the OWAReaper backdoor, enabling persistent mailbox access that survives credential res

Check Point has patched three vulnerabilities, including a critical actively exploited authentication bypass in SmartConsole. CISA has added the flaw to its KEV

Google has introduced an opt-in selfie video feature for account recovery. It uses facial comparison to verify identity when users are locked out.

IRIS C2, a startup offering up to $7M for zero-day exploits, is run by Jack Burkman and Jacob Wohl—convicted felons with a history of fraud and fabrication.

CISA has added a high-severity Microsoft SharePoint RCE flaw to its KEV catalog. Federal agencies must patch by Saturday under BOD 26-04.

The AryStinger botnet has compromised over 4,000 outdated routers, converting them into proxies for scanning, tunneling, and malicious traffic operations.

ESET researchers found two undocumented Windows variants of SprySOCKS, a backdoor linked to Chinese contractor I-SOON, targeting governments in four countries.