Death Cap Reporting @DeathCapReport

@T3chFalcon The automatic response is always to force us relinquish more privacy. We are the frog in the slowly boiling pot. And it's the perfect cover, if you disagree you're saying you don't want to protect kids.

@briankrebs broke the news that a new identity theft service that launched last week is selling digital scans of more than 153 million drivers licenses. Based on interviews with individuals whose licenses are available for purchase on this service, the data-brokers appear to be siphoning images collected by a widely-used identity verification company based in Louisiana: IDscan.net. Every time there is a large data breach, it rightly sparks conversations about how companies ensure the security of customers information and ensuring there are consequences for those that fail. The real question is, what the fuck can we do about it? I think the real answer should be a long hard look at why services actually need PII for verification. There are services that have a genuine need to know their customer, and there should be strict requirements for how they hold that data and serious punishments for failure. But for everyone else? They use our data as cash, they have no genuine requirement for it. The more information businesses have on you, the more money they can make by either targeting services to you or by selling that data on to the highest bidder. What’s the difference between ‘legitimate’ businesses selling our PII on to advertisers and cybercriminals selling our data on the dark web? Our PII is their cash grab. The answer can’t be stricter identification requirements, it has to be more privacy and control over our information in the first place. We should have control over how, when and who we share our information with. We shouldn’t be required to hand it over in to get access to basic services, then quietly suffer the consequences when it gets breached. I don’t have all the solutions to this complex problem, but I do know we need to push back on the idea that this is inevitable and a natural consequence of living in the modern age. Read more here: medium.com/@deathcaprepor…

The company which leaked data is IDScan. IDScan does not list all of their customers, however some are publicly known. If you have ever used these companies (and provided an ID) your data has been leaked: - Shell - AMC Theaters - DraftKings - Dutchie - FedEx - Hertz - Chevrolet (General Motors) - GameStop - Jack Henry - MRI (Checkpoint ID) - Polaris - Simmons Bank - LendingUSA - Circa Resort & Casino - Planet 13 - Rouses Market - US Coast Guard Academy - Caesars Entertainment - Motorola

vx-underground @vxunderground

a month ago

I really recommending reading this. In summary, a company which does ID verification for in-person interactions (hotels, car rentals, ID verification for alcohol or marijuana, etc) has some how exposed over 153,000,000 drivers licenses for people in the United States and Canada.

390 3K 19K 4.8M 9K

I really recommending reading this. In summary, a company which does ID verification for in-person interactions (hotels, car rentals, ID verification for alcohol or marijuana, etc) has some how exposed over 153,000,000 drivers licenses for people in the United States and Canada. It is a catastrophic data breach, probably one of the worse I've ever seen. If you're in the United States and have traveled, gotten a hotel, purchased marijuana or alcohol, there is a high probability you're in this. Unlike other breaches, this includes a photo of the person (from the license), making verification you've identified the person significantly easier. This poses a significant threat to celebrities (musicians, YouTubers, streamers, adult entertainers, actors, etc), politicians, lawyers, wealthy people (CEOs, investors, people of public interest), Law Enforcement Officers, etc Krebs himself, and several other security researchers, have already confirmed they're in the data leak. tl;dr gah damn dawg this company is going to be sued into oblivion krebsonsecurity.com/2026/09/fbi-pr…

Brave on desktop just added Email Aliases, a feature that lets you sign up for online services without revealing your personal email address. Email Aliases creates unique email addresses that forward to your primary inbox.

🛑 Ransom Busters says it hacked ransomware servers, then charged the victims. The actor wants $20,000 to $60,000 to recover data and delete stolen copies. GuidePoint says it may actually be a ransomware affiliate turning on its own partners. Read: thehackernews.com/2026/08/ransom…

Just because you have nothing to hide, does not mean that you have nothing to protect.

Subscription Wars: Sony Vs Gamers The Internets latest battle royale has arrived and it’s a heavyweight: Sony Vs gamers of the world. But the real loser? Our privacy and security. Sony’s recent announcement of phasing out physical discs by 2028 is a decision that’s stirred controversy online. But is the decision surprising? No, not really. Actually at this point you could say it would be stupid of them not to move in this direction. But is it good for customers, is this what they want? No, but does Sony care? Also no. Moving to a subscription model also grants greater control over software pricing, eliminates that pesky second-hand gaming market and slashes costs in the supply chain.Most people don’t shop for games in a physical store like they used to,as highlighted in recent industry reports. Most importantly, it ensures a continuous revenue stream — why charge people once when you can charge them every month? That’s a losers game. And what a great thing for consumers! Low cost to gain access to a plethora of content, it’s more convenient and it’s more sustainable. Don’t worry about the fact you now have a $150 monthly bill you never had before! Don’t worry about the fact you have to have 12 streaming services to get access to the content you want! Don’t worry about the fact that you will have to pay for access without ownership in perpetuity! The fact is this is the new normal. Even if customers reject it, most major gaming companies are moving in the same direction and soon there won’t be anywhere else to go. The choice will be gone from the market, and customers will either subscribe or give up something they love. Or will they? Sony and others other like them shouldn’t be surprised if people reject this lack of freedom and turn back to piracy. As the sentiment goes, “if buying isn’t owning, then piracy isn’t stealing”. Read the full article here: medium.com/@deathcaprepor…

x.com/i/article/2081…

OpenAI's model found a zero-day, chained multiple exploits, then used stolen credentials to cheat on a benchmark. This is a very big deal.

OpenAI @OpenAI

3 months ago

We're partnering with @huggingface to investigate an unprecedented security incident. Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation. Sharing preliminary findings to help defenders understand emerging risks:

2K 3K 21K 31.4M 7K

@WSJ They don't want power to get into the hands of users. They want us reliant on their monopolies so they can keep harvesting our data and our bank accounts. Free internet means privacy and choice, and that starts with open source tools.

AI has given real capability to attackers who never had any before. But up until recently, that capability still needed to be launched by human hands. That's no longer the case: agentic AI severs that leash. It takes an objective and walks the steps itself. What change is this going to bring?

@DailyDarkWeb A lot of these tools are no longer used. Unsurprisingly, the ecosystem doesn't incentivise great security. medium.com/@deathcaprepor…

Law enforcement operations highlight how MaaS providers are not incentivised to protect their customers data. medium.com/@deathcaprepor…

Law enforcement operations highlight how MaaS providers are not incentivised to protect their customers data. x.com/DeathCapReport…

Death Cap Reporting @DeathCapReport

3 months ago

Do malware-as-a-service providers like StealC care about the security of their affiliates? Cybercrime organisations are not incentivised to protect their customers. They don't care because they don't have to. medium.com/@deathcaprepor…

0 1 10 2K 0

Do malware-as-a-service providers like StealC care about the security of their affiliates? Cybercrime organisations are not incentivised to protect their customers. They don't care because they don't have to. medium.com/@deathcaprepor…

GLM-5.2 can now be run locally!🔥 The 2-bit model retains ~82% accuracy after we shrunk it from 1.51TB to 238GB (-84% size). Run on a 256GB Mac or RAM/VRAM setups. GLM-5.2 is the strongest open model to date. Guide: unsloth.ai/docs/models/gl… GGUF: huggingface.co/unsloth/GLM-5.…

Z.ai @Zai_org

4 months ago

Introducing GLM-5.2: Frontier Intelligence, Open Weights - Significant improvements in coding and agentic tasks - Strong long-horizon capabilities with a 1M context window - Two levels of reasoning effort: GLM-5.2 (max) pushes the limits, while GLM-5.2 (high) strikes a strong

721 2K 13K 7.7M 5K

@FalconFeedsio @theTelescopeio @Sycek_osint Really important research here, there isn't enough global tracking of the shadow economy or it's broader impacts across the world. I recently wrote on a similar topic: medium.com/@deathcaprepor…