Cyber Security News
Start. Stay. Grow.
Curated daily. The latest hacks, breaches, and cyber trends—humanized.
Daily cyber brief
Hacking Editorial Brief — September 3, 2026
FBI Investigates Mass Driver's License Database Breach Advertised on Russian Forum
A threat actor is advertising the sale of digital scans from approximately 153 million driver's licenses on the Russian-language forum Exploit under the service name "Nexus." The actor claims to have continuously exfiltrated data from an undisclosed source, offering scans that include full identity documentation. The FBI has opened an investigation into the breach, though the compromised entity and timeline of the intrusion have not been publicly identified. The scale of the alleged dataset—if accurate—represents one of the largest compilations of government-issued identification documents offered for sale in recent memory, raising significant fraud and identity theft risks.
Justice Department Pursues Attackers Behind X Password-Recovery Campaign
The U.S. Justice Department is working with X to identify individuals behind a password-recovery attack that targeted hundreds of user accounts. The campaign exploited account recovery mechanisms, though specific technical details of the attack vector have not been disclosed. The investigation marks renewed federal attention on social media platform security following escalating incidents targeting authentication and credential reset functions. The scope of compromised accounts and whether sensitive communications or direct messages were accessed remains unclear.
Sources: PCMag UK · Reuters · Infosecurity Magazine
Around the Web
Last Updated: N/A

Hacks + Heists
US officials revise claims that government agencies were hacked by Chinese, now say they ...
The distinction matters because it narrows the scope of confirmed breaches in what the DOJ described as a years-long Chinese cyber-espionage campaign ...
Read more →QTFY Campaign Targets NASA, Federal Reserve, and Other U.S. Agencies
The Department of Justice revealed that QTFY computer intrusion activity targeted NASA, the Federal Reserve, Department of Energy, Department of Justi...
Read more →DOJ blames China for string of hacks targeting federal agencies and hospitals - POLITICO
Chinese hackers carried out a yearslong coordinated campaign to worm their way into federal networks — including those at the Departments of ...
Read more →UK's small power plants face continued cyber risk after Iran-linked hack - The Guardian
Government measures to improve resilience are not due until 2030 and July's hack has not altered this timeline.
Read more →Justice Department and FBI Seize Platforms Operated and Used by China State-Sponsored ...
“These court-authorized seizures deny PRC-linked hackers access to tools they use to mount online attacks against our Nation's critical infrastructure...
Read more →
Big Cyber
US healthcare giant McKesson breached, ShinyHunters claims 284m patient records
ShinyHunters claimed it breached US healthcare giant McKesson and made a $55,236,150 ransom demand for 284 million patient records.
Read more →Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited
The US Cybersecurity and Infrastructure Security Agency (CISA) wants federal agencies to (re)shape their logging strategy around one question: when an...
Read more →Metabase Cloud Attacked via Zero-Day SQL Injection Vulnerability
Metabase disclosed a zero-day vulnerability (CVSS 10.0) in versions 1.58 and above that allowed unauthenticated attackers to inject SQL and gain admin...
Read more →Medical device maker Boston Scientific says a cyberattack is causing a 'global disruption' to ...
Zack Whittaker is the security editor at TechCrunch. He also authors the weekly cybersecurity newsletter, ...
Read more →
Hard Tech
React2Shell (CVE-2025-55182)
A 10.0 critical severity vulnerablility affecting server-side use of React.js, tracked as CVE-2025-55182 in React.js and CVE-2025-66478 specifically f...
Read more →Breaking Into a Brother (MFC-J1010DW): Three Security Flaws in a Seemingly Innocent Printer
We discovered three vulnerabilities that when chained together, allow for complete remote compromise:
Read more →Check Point - Wrong Check Point (CVE-2024-24919)
Gather round, gather round - it’s time for another blogpost tearing open an SSLVPN appliance and laying bare a recent in-the-wild exploited bug. This ...
Read more →Backdoor in XZ Utils allows RCE: everything you need to know - CVE-2024-3094
Detect and mitigate CVE-2024-3094, a critical supply chain compromise, affecting XZ Utils Data compression library. Organizations should patch urgentl...
Read more →Loading...
The Cybersecurity Chronicles
‘The Cybersecurity Chronicles: 2024‘ pulls back the curtain on the digital threats that shaped our world last year, revealing the human stories behind the headlines. From art galleries frozen by ransomware to prison tablets hacked with a minus sign, from British Library archivists racing to protect centuries of knowledge to Spotify users meticulously curating their digital identities – these stories illuminate how cybersecurity touches every aspect of modern life.
Author Mark Nole weaves together intimate portraits of the people on all sides of the digital battlefield: the defenders working through sleepless nights to protect critical infrastructure, the victims grappling with stolen identities and lost savings, and even the attackers themselves, operating from nondescript offices with project management software and performance metrics.
Through detailed reporting and narrative storytelling, Nole reveals how 2024 became the year when cybersecurity stopped being just a technical problem and emerged as a fundamentally human challenge. Whether you’re a security professional or simply someone trying to understand our increasingly digital world, these chronicles offer an unprecedented look at how technology shapes – and sometimes betrays – our trust, our privacy, and our lives.

Stay Updated with Cyber Security News
Get the latest cybersecurity headlines, breaking news, and expert insights delivered directly to your inbox. Stay ahead of threats and informed about the digital landscape.
Join thousands of cybersecurity professionals and enthusiasts. No spam, just valuable insights.