Infamous hacking group ShinyHunters claims to have stolen data on every FBI employee and applicant, and defaced the bureau’s jobs website to prove it. The hackers claim to have breached the FBI by exploiting Oracle’s Peoplesoft platform.
Cybercrime
RCMP ‘monitoring’ reports of massive North American drivers’ licence hack
The Royal Canadian Mounted Police says it is “aware” of an ongoing FBI investigation into a report that hackers gained access to tens of millions of government-issued identity records across North America— including Canadians’ driver’s licences.
Canadians are now being warned to stay vigilant for bad actors that can exploit people’s personal data.
ID Verification Breach Exposes Millions of Sensitive Identity Documents
If you ever needed more proof that governments pressuring companies to collect ID data from customers or users is a bad idea, you only have to look at what happened this week. A dark-web service advertised on August 31 has been offering over 153 million scans of driver’s licenses, more than 10 million other identity cards, over 3 million travel documents and/or international IDs, and at least 579,000 medical cards.
The data apparently stems from a company hired to verify people’s identities. The service, called Nexus, was advertised on the Russian-language cybercrime forum Exploit.
“… searching for just Canadian drivers licenses returns approximately 1.1 million results, with the largest concentration from Ontario (473,673 records).”
Water systems are ripe for cyberattacks, experts warn after suspected Iranian hacks
In late 2022, Microsoft detected the hack of a water system in Guam that U.S. intelligence agencies in the following months determined was orchestrated by China. The idea wasn’t new. The spy agencies had long watched as Iran targeted Israeli water systems.
“That another nation state was doing it to us — that was unsettling,” recalled one former U.S. official, who, like several others interviewed for this story, spoke on the condition of anonymity because of the matter’s sensitivity.
Canadian Tire says customer info caught in data breach on e-commerce platform
Canadian Tire Corp. Ltd. says it has identified a data breach involving personal information belonging to customers, which was stored in an e-commerce database.
The retailer says the breached information belongs to shoppers who had an e-commerce account with Canadian Tire or its other banners, SportChek, Mark’s/L’Equipeur and Party City.
The breached data included names, addresses, emails and birth years, as well as encrypted passwords and in some cases incomplete credit card numbers.
Cache of Devices Capable of Crashing Cell Network Is Found Near U.N.
The Secret Service discovered more than 100,000 SIM cards and 300 servers, which could disable cellular towers or be used to conduct surveillance.
The Secret Service found and seized an illicit network of sophisticated equipment in the New York region that was capable of shutting down the cellular network as foreign leaders prepared to gather nearby for the annual U.N. General Assembly, the agency announced on Tuesday.
Officials said the anonymous communications network, which included more than 100,000 SIM cards and 300 servers, could interfere with emergency response services and could be used to conduct encrypted communication. One official said the network was capable of sending 30 million text messages per minute, anonymously. The official said the agency had never before seen such an extensive operation.
The Secret Service dismantled a network of more than 300 SIM servers and 100,000 SIM cards in the New York-area that were capable of crippling telecom systems and carrying out anonymous telephonic attacks, disrupting the threat before world leaders arrived for the UN General… pic.twitter.com/sZKUeGqvGY
— U.S. Secret Service (@SecretService) September 23, 2025
This is being taken very seriously in U.S. intel circles. pic.twitter.com/ZR7zPoEZdh
— Lara Logan (@laralogan) September 23, 2025
More … Secret Service foils massive plot to cripple NYC cell network and threaten UN General Assembly
h/t Neocon
House of Commons hit by cyberattack from ‘threat actor’: internal email
The House of Commons and Canada’s cybersecurity agency are investigating a significant data breach caused by an unknown “threat actor” targeting employee information.
According to an internal email obtained by CBC News, the House of Commons alerted staff on Monday that there was an information breach. It said a malicious actor was able to exploit a recent Microsoft vulnerability to gain unauthorized access to a database containing information used to manage computers and mobile devices.
Oh sure BCF has been under a months long DDOS attack but all CBC cares about is Stupid Parliament.
Largest Data Breach in History: *16 Billion* Login Credentials Exposed in Databases
Security researchers have uncovered potentially the largest data breach in history, comprising an astounding 16 billion login credentials, which include Apple accounts.
9to5Mac reports that a team of security researchers has stumbled upon a massive trove of stolen login credentials, exposing an unprecedented 16 billion records, including Apple accounts. The discovery, which researchers describe as “one of the largest data breaches in history,” has sent shockwaves through the cybersecurity community and raised serious concerns about the potential for widespread account takeovers, identity theft, and highly targeted phishing attacks.
China’s digital strategy: Cyber espionage!
China’s infiltration into agricultural IoT (Internet of Things) networks represents a critical yet underexplored dimension of its global technological strategy. Through key players such as Huawei and Alibaba Cloud, Beijing has embedded IoT technologies into agricultural systems in Latin America, Africa, and Asia. These initiatives, often framed as development partnerships aimed at improving food production and supply chain resilience, concurrently enable the collection of extensive agricultural and environmental data with profound strategic and geopolitical implications.
Planes Hit by Mystery GPS Jamming Across Europe
Persistent interference with navigational signals in eastern Europe impacted more than 1,600 airplanes—including civilian aircraft—in less than two days, according to open-source analysis, as jamming plagues the airspace around the Baltic Sea.
Jamming lasting just under 48 hours affected 1,614 airplanes, many of which were civilian aircraft flying around the Baltic region in eastern Europe, according to an open-source intelligence account that regularly tracks GPS interference.
Huge cybersecurity leak lifts lid on world of China’s hackers for hire
A big leak of data from a Chinese cybersecurity firm has revealed state security agents paying tens of thousands of pounds to harvest data on targets, including foreign governments, while hackers hoover up huge amounts of information on any person or institution who might be of interest to their prospective clients.
The cache of more than 500 leaked files from the Chinese firm I-Soon was posted on the developer website Github and is thought by cybersecurity experts to be genuine. Some of the targets discussed include Nato and the UK Foreign Office.
What is the dark web and what can you find on there?
During the trial of Brianna Ghey’s killers, the court heard an illuminating text exchange between the teenage murderers Scarlett Jenkinson and Eddie Ratcliffe.
Jenkinson had been fuelling her fantasies by accessing murder and torture videos on the dark web. “I love watching torture vids. Real ones on the dark web,” she told her friend. But she wanted more and asked Ratcliffe how to get hold of live videos of people being tortured, for which you had to pay. “Why would I know?,” Ratcliffe said.
Notorious Russia gang claims it stole ‘classified and top secret documents’ from US intelligence agencies – as FBI warns China hackers are preparing to ‘wreak havoc’ in America
A Russian ransomware gang allegedly infiltrated a technology company responsible for handling top-secret documents from US intelligence agencies, like the FBI.
The notorious group Blackcat, also known as ALPHV, is threatening to release the classified documents if the company, Technica, does not contact them soon.
Technica is a veteran-owned company that provides technology solutions to support the Federal Government’s mission to defend and protect America.
Authorities investigating massive security breach at Global Affairs Canada
Canadian authorities are investigating a prolonged data security breach following the “detection of malicious cyber activity” affecting the internal network used by Global Affairs Canada staff, according to internal department emails viewed by CBC News.
The breach affects at least two internal drives, as well as emails, calendars and contacts of many staff members.
CBC News spoke to multiple sources with knowledge of the situation, including employees who have received instructions on how the breach affects their ability to work. Some were told to stop working remotely as of last Wednesday.
h/t Mauser
Huge data leak dubbed the ‘Mother of all Breaches’ sees 26 BILLION records leaked from sites including Twitter, Linkedin, and Dropbox
Your personal information may have been leaked in the ‘Mother of all Breaches’ (MOAB), cybersecurity researchers have warned.
Over 26 billion personal records have been exposed, in what researchers believe to be the biggest-ever data leak.
Sensitive information from several sites including Twitter, Dropbox, and Linkedin was discovered on an unsecured page.