In September, a threat actor claimed to have access to 38 million records from Argentina's SIPA pension system. ANSES denies a hack. Here's what we know and how the leaked data fuels phishing.
Read more: Argentina SIPA Data Leak Claim: The Phishing Risk Explained
Attackers accessed DNI images and selfies from TuLotero's KYC service in July 2026. What is confirmed, what is claimed, and how operators stop the phishing that follows.
Read more: TuLotero KYC Breach: How Stolen IDs Fuel Gambling Phishing
A dark web service called Nexus offered 153 million US and Canadian driver's license scans tied to IDScan.net. What was exposed and how to limit the fraud that follows.
Read more: 153M Driver's Licenses for Sale: The IDScan.net Nexus Leak
Two critical unauthenticated RCE flaws in PHP core, dubbed PHP2Shell, leaked a day early. What happened, why EOL PHP 5 and 7 installs are the real problem, and what to do now.
Read more: Another Day, Another Core RCE: Welcome to PHP2Shell (CVE-2026-109618 & CVE-2026-109619)
Attackers took over Danfoss refrigeration controllers in hundreds of French supermarkets and heated fridges to 50°C. What failed, which models are affected and how to protect them.
Read more: French Supermarket Fridge Hack: What Happened and How to Prevent It
Police in Japan say a couple hid a mini PC behind a hotel fridge and used the hotel Wi-Fi to send 480,000 credit card phishing emails. How the scheme worked and what it teaches.
Read more: Hidden PC in a Kobe Hotel Sent 480,000 Phishing Emails
A leaked "123456" password on a contractor's account gave an attacker access to Denmark's CPR register and 8.8 million records. What failed and how to prevent it.
Read more: Denmark CPR Breach: How "123456" Exposed 8.8 Million People
Tampered Ledger devices sold through third-party resellers carried a hidden cellular implant that sent seed phrases to attackers. Over $100 million was drained. How to check yours.
Read more: Tampered Ledger Wallets: How the Hidden Implant Steals Seed Phrases
ASCII smuggling hides invisible Unicode tag characters inside words so email filters miss them while people read normal text. How the attack works and how to stop it.
Read more: ASCII Smuggling: How Invisible Unicode Bypasses Email Filters