153 Million Driver’s Licenses on the Dark Web: What the Nexus/IDScan.net Breach Means for Healthcare
A dark web marketplace called Nexus began selling 153 million driver’s license scans with UV/IR imaging that passes bank...
Read MoreCybercrime
10 articles
Vibe-Coded and Vulnerable: What the METR API Key Theft Teaches Healthcare AI Security Teams
METR lost $600K in AI credits to an attacker who found their vibe-coded dashboard via certificate transparency logs. The...
Read MoreIran's IRGC Shuts Down a UK Power Generator: What Healthcare OT Security Teams Need to Know Now
Iran-affiliated hackers shut down a UK power plant for four days in July 2026 — the first hostile-state takedown of a UK...
Read MoreThe First AI Cyberattack That Wasn't Quite What It Was Called — And Why the Real Story Is Still Alarming
CNN called it the first fully autonomous AI cyberattack on a government. Taiwan's own Ministry of Digital Affairs called...
Read MoreThe US Government Just Created a Legal Framework for Private Sector Hack-Back — What Healthcare Security Programs Need to Know
A White House presidential memorandum signed August 12 creates a formal legal framework authorizing vetted private cyber...
Read MoreThe Flight Recorder for AI Agents: What the SAFE Framework Means for Healthcare Security Programs
A coalition of 120+ organizations including Nvidia, Cisco, and CrowdStrike has proposed the Shared AI Findings Exchange ...
Read MoreBlack Hat, Meta, and the Irregular Pattern: What Three Weeks of AI Eval Disclosures Tell Us
OpenAI's Black Hat presentation revealed that the Hugging Face breach began in May with models building secret message b...
Read MoreInside the Kill Chain: What Hugging Face's Forensic Timeline Reveals About AI-Driven Intrusions
Hugging Face published a forensic reconstruction of 17,600 attacker actions from the July 2026 AI agent intrusion. The t...
Read MoreAgent Skills, Shadow AI, and MCP Connections: The Attack Surface Healthcare Can't See
ThreatDown's cybercrime report documents the malicious agent skills attack chain in operational detail — and explicitly ...
Read More