‼️ Cronos halted its blockchain after a price-manipulation attack let an attacker borrow $74 million from the Tectonic lending app
The network is back online and says the chain state was rolled back to before the exploit
PeckShield says only about $6 million in Ethereum left the chain; the rest is stuck on Cronos
The network is back online and says the chain state was rolled back to before the exploit
PeckShield says only about $6 million in Ethereum left the chain; the rest is stuck on Cronos
🤣14😁4❤1🤪1
🚨 BREAKING: Qilin has briefly published 6.3GB of data the ransomware group says it stole from the ATF, after a 72-hour countdown expired.
Files include Cellebrite extractions, dumps from an iPhone 6 and a Samsung Galaxy J3, and case folders naming investigation targets, phone numbers and IP addresses.
ATF is still investigating the claims and has not confirmed a breach.
Files include Cellebrite extractions, dumps from an iPhone 6 and a Samsung Galaxy J3, and case folders naming investigation targets, phone numbers and IP addresses.
ATF is still investigating the claims and has not confirmed a breach.
1❤14😱2🤣1
‼️BREAKING: Nearly 22,000 Microsoft Exchange servers still miss the fix for a critical vulnerability that gets attackers into mailboxes without a password, Shadowserver says
The proof-of-concept exploit code is publicly available and easy to abuse.
Read:
https://shadowserver.org/what-we-do/network-reporting/vulnerable-exchange-server-report/
The proof-of-concept exploit code is publicly available and easy to abuse.
Read:
https://shadowserver.org/what-we-do/network-reporting/vulnerable-exchange-server-report/
😭9🔥6🤣4😁1🎉1
‼️ Many X users got password-reset emails they never requested, fortunately X engineer Mridul Singhai says there is no evidence of a breach
He says attackers appear to be targeting accounts now X Money is widely available
You can use X's Password Reset Protect setting against these attacks
He says attackers appear to be targeting accounts now X Money is widely available
You can use X's Password Reset Protect setting against these attacks
🤣20❤1
‼️ BREAKING: We now know what led to the major breach at Manchester Airports Group that exposed 8.7 million people's data. Turns out they made a serious error: they put API keys with access to everything in their frontend's JavaScript files.
🤣35👏5😁3🥴2
🚨 BREAKING: Defense Secretary Pete Hegseth’s driver’s license has leaked. A new dark-web service is selling scans of his and 153M+ U.S. and Canadian driver’s licenses.
Timestamps on the scans match victims’ visits to Hertz rental counters and cannabis dispensaries. Evidence points to idscan[.]net, an ID-verification vendor used by Hertz, Target, FedEx and 1,000+ dispensaries.
The FBI opened an investigation on Tuesday. Nexus claims it has been exfiltrating for over a year and added ~400,000 licenses in 24 hours.
https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
Timestamps on the scans match victims’ visits to Hertz rental counters and cannabis dispensaries. Evidence points to idscan[.]net, an ID-verification vendor used by Hertz, Target, FedEx and 1,000+ dispensaries.
The FBI opened an investigation on Tuesday. Nexus claims it has been exfiltrating for over a year and added ~400,000 licenses in 24 hours.
https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
🤣37😨6
🇳🇴 Norway's privacy regulator wants smart glasses pulled from sale. As a first step, Norway's Digitalisation Minister Karianne Tung is weighing a ban on facial recognition of strangers in public rather than on the glasses themselves, and is setting up an expert group to propose rules this autumn for the cameras and AI now built into glasses, earbuds and caps.
1❤29🔥6👍1
‼️ BREAKING: A major breach at Nordic/Benelux IT supplier Dustin has led it to take systems offline. Webshops are down, and orders and deliveries have stopped.
We have reason to believe Dustin also stores highly confidential government data, possibly exposing secret networks and hardware. They are a major supplier of IT hardware and software to government bodies across the Nordics and Benelux.
https://www.dustingroup.com/en/media#/pressreleases/dustin-investigates-a-serious-it-security-incident-3464571
We have reason to believe Dustin also stores highly confidential government data, possibly exposing secret networks and hardware. They are a major supplier of IT hardware and software to government bodies across the Nordics and Benelux.
https://www.dustingroup.com/en/media#/pressreleases/dustin-investigates-a-serious-it-security-incident-3464571
🤣11👍1
❗️A UK class action is seeking £2bn from Apple over its tracking prompts.
Since 2021 apps must ask permission before tracking Apple users — but those rules were less strict for Apple's own apps, says Hausfeld, which filed the claim on 3 September for thousands of UK developers. Apple denies any double standard.
Apple says it is "bound by the exact same requirements as all developers".
https://www.hausfeld.com/en-gb/news/apple-faces-2-billion-legal-action-over-app-tracking-transparency-att-framework
Since 2021 apps must ask permission before tracking Apple users — but those rules were less strict for Apple's own apps, says Hausfeld, which filed the claim on 3 September for thousands of UK developers. Apple denies any double standard.
Apple says it is "bound by the exact same requirements as all developers".
https://www.hausfeld.com/en-gb/news/apple-faces-2-billion-legal-action-over-app-tracking-transparency-att-framework
🤔10👍4🤣3🔥2💩1