Coder Registry Hijacked to Steal Cloud Secrets

Hackers have hijacked the Coder registry, exposing developers using its Terraform module registry to credential-stealing malware. Unauthorized changes to Coder’s Cloudflare infrastructure allowed threat actors to redirect traffic to attacker-controlled servers. These rogue servers hosted modified Terraform modules designed to extract cloud development credentials. The malicious activity on registry.coder.com persisted between 07:35 UTC and 21:45 […]

Nexus Sells 153M Driver’s Licences; FBI Probes

A dark web identity theft service, Nexus, emerged on September 1, 2026, advertising over 153 million driver’s licenses for sale, affecting individuals in the United States and Canada. The FBI’s New Orleans field office immediately launched an investigation, suspecting a breach at idscan.net, a New Orleans-based identity verification firm. Brian Krebs of KrebsOnSecurity connected this […]

NCSC Warns of OT Attacks

The NCSC warns of a heightened threat to operational technology (OT) environments as cyber attackers intensify their focus on these critical infrastructures. With an increase in disruptive cyber activities, organizations must bolster their defenses to safeguard sensitive OT systems. These setups, integral to industries from manufacturing to utilities, are facing new vulnerabilities that hackers exploit […]

Google Urges Patch After Chrome Zero-Day Exploited

Google urges immediate user action to patch Chrome with an emergency security update that addresses a critical zero-day flaw, CVE-2026-85046, actively exploited in real-world attacks. This vulnerability, found in the V8 JavaScript and WebAssembly engine, poses serious risks by allowing attackers to execute malicious code just by visiting compromised websites. While Google has not revealed […]