Cybercrime / Ransomware:
- The United Kingdom has issued economic sanctions against Cryptomus (formerly Certa Payments and Xeltox Enterprises), a cryptocurrency platform identified as a major conduit for ransomware payments and other illicit activities benefiting the Russian government. Chainalysis and TRM Labs have highlighted Cryptomus's significant role in processing illicit funds and its historical ties to cybercrime services and money laundering, noting that the platform has rebranded multiple times and launched parallel services to circumvent sanctions. 👉 assets.publishing.service.gov.uk 👉 krebsonsecurity.com 👉 chainalysis.com 👉 trmlabs.com
Cybercrime / Hacking:
- The FBI has arrested Edward Dubrovsky, a Canadian national and founder of the ransomware negotiation firm Cypfer, in Pennsylvania in connection with the ShinyHunters hacking group. Dubrovsky, who was attending a cyber insurance conference, is facing charges of cyber extortion and conspiracy. Sources indicate the investigation is centralized in the Eastern District of Texas, and his arrest follows a series of escalated attacks by ShinyHunters, including a significant data theft from the FBI and extortion attempts against the Cl0p ransomware group. 👉 nytimes.com$ 👉 x.com 👉 netdiligence.com 👉 courtlistener.com 👉 krebsonsecurity.com
Cybercrime / Data Theft:
- A teenager from Jordan, identified as Saif Al-din Khader and using the hacker handle "Rey," has been detained and is reportedly cooperating with the FBI in an investigation into the ShinyHunters hacking group. This development occurred after ShinyHunters allegedly exfiltrated data from a business unit recently divested by Boeing, raising security concerns. Rey was previously profiled for his alleged involvement with multiple ransomware groups and for taunting the FBI and Cl0p after another suspect's arrest. 👉 reuters.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 cloud.google.com 👉 reuters.com 👉 krebsonsecurity.com
Cybercrime / Ransomware:
- Pepijn van der Stap, a 24-year-old convicted cybercriminal from the Netherlands known as "Umbreon," has been arrested on suspicion of aiding the ShinyHunters hacking group. Van der Stap, who previously admitted to data theft and extortion, was recently released from prison and worked in offensive security. Following his arrest, ShinyHunters reportedly escalated attacks, targeting the FBI and Cl0p ransomware. 👉 nltimes.nl 👉 krebsonsecurity.com
Cybercrime / Data Breach:
- A U.S. Army soldier, Cameron John Wagenius, has been sentenced to 70 months in prison and ordered to pay nearly $300,000 in restitution for hacking into telecommunications companies and stealing mobile call and text metadata for over 100 million AT&T customers. Wagenius, operating as "Kiberphant0m," also allegedly extorted companies and threatened to release national security secrets. Co-conspirators Kenneth Schuchman, Conor Riley Moucka, and John Erin Binns are also facing charges. 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Data Privacy / Lawsuit:
- Consumer data broker Radaris.com has lost control of its domain name and related domains as part of a lawsuit alleging violations of New Jersey's Daniel's Law, which protects personal information of law enforcement and public officials. The court ordered the domain transfer after Radaris and its associated entities repeatedly failed to appear in court or comply with removal requests, employing delaying tactics and "shell game" ownership structures. 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Software Vulnerabilities / Patch Tuesday:
- Microsoft has released its September 2026 Patch Tuesday, addressing a record number of 974 security vulnerabilities across its products, including 113 critical flaws. This surpasses previous patch batch records and brings the year's total to over 2,600 vulnerabilities. Two zero-day vulnerabilities in the Windows Shell are being actively exploited, allowing privilege escalation. 👉 msrc.microsoft.com$ 👉 msrc.microsoft.com$ 👉 krebsonsecurity.com
Cybercrime / Data Theft:
- A new dark web service called "Nexus" is selling digital scans of over 153 million U.S. and Canadian driver's licenses, along with other identification documents. The FBI's New Orleans field office is investigating the source of the data, which appears to originate from a breach at an identity verification company and includes sensitive information potentially linked to travel and rental car records. 👉 exploit.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 en.wikipedia.org 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Cybercrime / Supply Chain Attacks:
- Australian authorities have arrested two men, aged 21 and 23, in connection with the TeamPCP cybercrime group, known for its extensive supply chain attacks. TeamPCP has compromised hundreds of open-source software tools, including LiteLLM and GitHub repositories, to steal credentials and deploy malware, affecting numerous organizations globally. The group's tactics include a contest to incentivize further supply chain compromises. 👉 afp.gov.au 👉 wired.com 👉 cloudsek.com 👉 dataminr.com 👉 x.com 👉 x.com 👉 x.com 👉 dataminr.com 👉 krebsonsecurity.com
Cybercrime / Identity Theft:
- The FBI is investigating a new dark web service called "Nexus" that is selling over 153 million digital scans of U.S. and Canadian driver's licenses, along with other identification documents. The data appears to be sourced from a breach at an identity verification company and includes detailed images with timestamps potentially linked to travel or rental car usage. 👉 exploit.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Cybercrime / Data Theft:
- Authorities in the Netherlands have arrested Pepijn van der Stap, a 24-year-old convicted cybercriminal known as "Umbreon," on suspicion of aiding the ShinyHunters hacking group. Van der Stap, who has a history of data theft and extortion, was recently released from prison and employed in offensive security. Following his arrest, ShinyHunters reportedly escalated its attacks, including a significant data theft from the FBI and extortion of the Cl0p ransomware group. 👉 nltimes.nl 👉 krebsonsecurity.com
Cybercrime / Ransomware:
- Microsoft has released its September 2026 Patch Tuesday, addressing a record 974 security vulnerabilities, including two actively exploited zero-day flaws in the Windows Shell. This release significantly surpasses previous patch loads, bringing the year's total to over 2,600 vulnerabilities. 👉 msrc.microsoft.com$ 👉 msrc.microsoft.com$ 👉 krebsonsecurity.com
Cybercrime / Data Theft:
- A U.S. Army soldier, Cameron John Wagenius, has been sentenced to 70 months in prison for hacking telecommunications companies and stealing call and text metadata from over 100 million AT&T customers. Operating as "Kiberphant0m," Wagenius also extorted companies and threatened to release national security secrets. His co-conspirators, including Kenneth Schuchman, are also facing charges. 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Data Privacy / Lawsuit:
- The data broker Radaris.com has had its domains transferred to Atlas Data Privacy Corp. as part of a lawsuit for allegedly violating New Jersey's Daniel's Law by failing to remove personal information of law enforcement and public officials. The court ordered the transfer due to Radaris's repeated non-compliance and use of delaying tactics and shell company structures. 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Cybercrime / Data Breach:
- A new identity theft service called "Nexus" is reportedly selling over 153 million digital scans of U.S. and Canadian driver's licenses, originating from a breach at an identity verification company. The FBI is investigating the source of the data, which appears to include timestamped images potentially linked to travel and rental car records. 👉 exploit.com 👉 krebsonsecurity.com
Cybercrime / Ransomware:
- The U.K. has sanctioned Cryptomus, a cryptocurrency platform identified as a key processor for ransomware payments and other illicit financial activities supporting Russia. Previously known as Certa Payments and Xeltox Enterprises, Cryptomus has been sanctioned for processing payments that benefit the Russian government and has faced significant fines for anti-money laundering violations, subsequently launching "Heleket" as a parallel service. 👉 krebsonsecurity.com 👉 chainalysis.com 👉 trmlabs.com
Software Vulnerabilities / Microsoft:
- Microsoft released its September 2026 Patch Tuesday, addressing 974 vulnerabilities, including two actively exploited zero-day flaws in Windows Shell. This patch batch is Microsoft's largest ever, bringing the year's total to over 2,600 vulnerabilities. 👉 msrc.microsoft.com$ 👉 msrc.microsoft.com$ 👉 krebsonsecurity.com
Cybercrime / Supply Chain Attack:
- Australian authorities have arrested two men suspected of being part of the TeamPCP cybercrime group, known for its prolific supply chain attacks on open-source software. The group has compromised numerous code repositories, including LiteLLM and GitHub, leading to data theft and extortion impacting organizations worldwide. 👉 afp.gov.au 👉 wired.com 👉 cloudsek.com 👉 krebsonsecurity.com
Cybercrime / Data Breach:
- Authorities in the Netherlands have arrested Pepijn van der Stap, a 24-year-old convicted cybercriminal known as "Umbreon," for alleged involvement with the ShinyHunters hacking group. Van der Stap, who has a history of data theft and extortion, was recently released from prison and worked in offensive security. His arrest followed escalated attacks by ShinyHunters, including a significant data breach of the FBI and extortion of the Cl0p ransomware group. 👉 nltimes.nl 👉 krebsonsecurity.com
Cybercrime / Data Breach:
- The FBI is investigating "Nexus," a new dark web service offering over 153 million digital scans of U.S. and Canadian driver's licenses, allegedly sourced from a breach at an identity verification company. The data includes timestamped images that appear to correlate with travel and rental car usage, prompting an inquiry into the origin of the compromised information. 👉 exploit.com 👉 krebsonsecurity.com
Cybercrime / Ransomware:
- The U.K. has imposed sanctions on Cryptomus, a cryptocurrency platform identified as a key facilitator of ransomware payments and illicit financial activities supporting Russia. Previously known as Certa Payments and Xeltox Enterprises, Cryptomus has faced significant fines for AML violations and has launched new services to circumvent sanctions. 👉 krebsonsecurity.com 👉 chainalysis.com 👉 trmlabs.com
Data Privacy / Lawsuit:
- Radaris.com and associated domains have been transferred to Atlas Data Privacy Corp. following a New Jersey lawsuit alleging violations of Daniel's Law, which protects personal information of public officials. The court ordered the transfer due to Radaris's repeated non-compliance and use of delaying tactics involving shell companies. 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Software Vulnerabilities / Microsoft:
- Microsoft's September 2026 Patch Tuesday addresses 974 vulnerabilities, including two actively exploited zero-day flaws in Windows Shell. This release is Microsoft's largest patch batch to date, bringing the year's total to over 2,600 vulnerabilities. 👉 msrc.microsoft.com$ 👉 msrc.microsoft.com$ 👉 krebsonsecurity.com
Cybercrime / Supply Chain Attack:
- Two men in Western Australia have been arrested in connection with the TeamPCP cybercrime group, which is known for its persistent supply chain attacks on open-source software. TeamPCP has compromised hundreds of code repositories, including LiteLLM and GitHub, leading to data theft and extortion campaigns targeting numerous organizations globally. 👉 afp.gov.au 👉 wired.com 👉 krebsonsecurity.com
Cybercrime / Data Theft:
- A U.S. Army soldier, Cameron John Wagenius, was sentenced to 70 months in prison for hacking telecommunications companies, including AT&T, and stealing mobile call and text metadata for over 100 million customers. Operating as "Kiberphant0m," he also engaged in extortion and threatened to release national security secrets. 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Cybercrime / Data Breach:
- Authorities in the Netherlands have arrested Pepijn van der Stap, a 24-year-old convicted cybercriminal linked to the ShinyHunters group. Van der Stap, also known as "Umbreon," has a history of data theft and extortion and was recently released from prison. Following his arrest, ShinyHunters reportedly intensified its attacks, including a significant breach of the FBI and extortion of the Cl0p ransomware group. 👉 nltimes.nl 👉 krebsonsecurity.com
Cybercrime / Data Breach:
- The FBI is investigating "Nexus," a new dark web service selling over 153 million digital scans of U.S. and Canadian driver's licenses, allegedly obtained from a breach at an identity verification company. The data includes timestamped images potentially linked to travel and rental car records, prompting an inquiry into the source of the compromised information. 👉 exploit.com 👉 krebsonsecurity.com
Cybercrime / Ransomware:
- The U.K. has imposed sanctions on Cryptomus, a cryptocurrency platform identified as a key facilitator of ransomware payments and illicit financial activities supporting Russia. Previously known as Certa Payments and Xeltox Enterprises, Cryptomus has faced significant fines for AML violations and has launched new services to circumvent sanctions. 👉 krebsonsecurity.com 👉 chainalysis.com 👉 trmlabs.com
Data Privacy / Lawsuit:
- Radaris.com and associated domains have been transferred to Atlas Data Privacy Corp. due to violations of New Jersey's Daniel's Law, which protects personal information of public officials. The court ordered the transfer after Radaris repeatedly failed to comply with removal requests and engaged in delaying tactics. 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Software Vulnerabilities / Microsoft:
Cybercrime / Supply Chain Attack:
- Australian authorities have arrested two men linked to the TeamPCP cybercrime group, known for its supply chain attacks on open-source software like LiteLLM and GitHub. The group's activities have led to data theft and extortion campaigns affecting numerous global organizations. 👉 afp.gov.au 👉 wired.com 👉 krebsonsecurity.com
Cybercrime / Data Theft:
- A U.S. Army soldier, Cameron John Wagenius, was sentenced to 70 months in prison for hacking telecommunications companies, including AT&T, and stealing mobile call and text metadata from over 100 million customers. He also engaged in extortion and threatened to release national security secrets. 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Cybercrime / Data Breach:
- Authorities in the Netherlands have arrested Pepijn van der Stap, a 24-year-old convicted cybercriminal linked to the ShinyHunters group, on charges of aiding in data theft and extortion. Following his arrest, ShinyHunters reportedly escalated attacks against the FBI and Cl0p ransomware. 👉 nltimes.nl 👉 krebsonsecurity.com
Cybercrime / Data Breach:
- The FBI is investigating "Nexus," a new dark web service offering over 153 million digital scans of U.S. and Canadian driver's licenses, allegedly obtained from a breach at an identity verification company. The data includes timestamped images potentially linked to travel and rental car records. 👉 exploit.com 👉 krebsonsecurity.com
Cybercrime / Ransomware:
- The U.K. has sanctioned Cryptomus, a cryptocurrency platform identified as a key facilitator of ransomware payments and illicit financial activities supporting Russia. Previously known as Certa Payments and Xeltox Enterprises, Cryptomus has faced significant fines for AML violations and has launched new services to circumvent sanctions. 👉 krebsonsecurity.com 👉 chainalysis.com 👉 trmlabs.com
Data Privacy / Lawsuit:
- Radaris.com and associated domains have been transferred to Atlas Data Privacy Corp. due to violations of New Jersey's Daniel's Law, which protects personal information of public officials. The court ordered the transfer after Radaris repeatedly failed to comply with removal requests and employed delaying tactics. 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Software Vulnerabilities / Microsoft:
Cybercrime / Supply Chain Attack:
- Australian authorities have arrested two men linked to the TeamPCP cybercrime group, known for its supply chain attacks on open-source software like LiteLLM and GitHub. The group's activities have led to data theft and extortion campaigns affecting numerous global organizations. 👉 afp.gov.au 👉 wired.com 👉 krebsonsecurity.com
Cybercrime / Data Theft:
- Authorities in the Netherlands have arrested Pepijn van der Stap, a 24-year-old convicted cybercriminal linked to the ShinyHunters group, for alleged involvement in data theft and extortion. Following his arrest, ShinyHunters reportedly escalated attacks against the FBI and Cl0p ransomware. 👉 nltimes.nl 👉 krebsonsecurity.com
Cybercrime / Data Breach:
- The FBI is investigating "Nexus," a new dark web service offering over 153 million digital scans of U.S. and Canadian driver's licenses, allegedly obtained from a breach at an identity verification company. The data includes timestamped images potentially linked to travel and rental car records. 👉 exploit.com 👉 krebsonsecurity.com
Cybercrime / Ransomware:
- The U.K. has sanctioned Cryptomus, a cryptocurrency platform identified as a key facilitator of ransomware payments and illicit financial activities supporting Russia. Previously known as Certa Payments and Xeltox Enterprises, Cryptomus has faced significant fines for AML violations and has launched new services to circumvent sanctions. 👉 krebsonsecurity.com 👉 chainalysis.com 👉 trmlabs.com
Data Privacy / Lawsuit:
- Radaris.com and associated domains have been transferred to Atlas Data Privacy Corp. due to violations of New Jersey's Daniel's Law, which protects personal information of public officials. The court ordered the transfer after Radaris repeatedly failed to comply with removal requests and employed delaying tactics. 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Software Vulnerabilities / Microsoft:
Cybercrime / Supply Chain Attack:
- Australian authorities have arrested two men linked to the TeamPCP cybercrime group, known for its supply chain attacks on open-source software like LiteLLM and GitHub. The group's activities have led to data theft and extortion campaigns affecting numerous global organizations. 👉 afp.gov.au 👉 wired.com 👉 krebsonsecurity.com
Cybercrime / Data Theft:
- A U.S. Army soldier, Cameron John Wagenius, was sentenced to 70 months in prison for hacking telecommunications companies, including AT&T, and stealing mobile call and text metadata from over 100 million customers. He also engaged in extortion and threatened to release national security secrets. 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Cybercrime / Ransomware:
- The U.K. has sanctioned Cryptomus, a cryptocurrency platform identified as a key facilitator of ransomware payments and illicit financial activities supporting Russia. Previously known as Certa Payments and Xeltox Enterprises, Cryptomus has faced significant fines for AML violations and has launched new services to circumvent sanctions. 👉 krebsonsecurity.com 👉 chainalysis.com 👉 trmlabs.com
Data Privacy / Lawsuit:
- Radaris.com and associated domains have been transferred to Atlas Data Privacy Corp. due to violations of New Jersey's Daniel's Law, which protects personal information of public officials. The court ordered the transfer after Radaris repeatedly failed to comply with removal requests and employed delaying tactics. 👉 krebsonsecurity.com 👉 krebsonsecurity.com
Software Vulnerabilities / Microsoft:
Cybercrime / Supply Chain Attack:
- Australian authorities have arrested two men linked to the TeamPCP cybercrime group, known for its supply chain attacks on open-source software like LiteLLM and GitHub. The group's activities have led to data theft and extortion campaigns affecting numerous global organizations. 👉 afp.gov.au 👉 wired.com 👉 krebsonsecurity.com
Cybercrime / Data Theft:
- A U.S. Army soldier, Cameron John Wagenius, was sentenced to 70 months in prison for hacking telecommunications companies, including AT&T, and stealing mobile call and text metadata from over 100 million customers. He also engaged in extortion and threatened to release national security secrets. 👉 krebsonsecurity.com 👉 krebsonsecurity.com 👉 krebsonsecurity.com
