SpeedX, the delivery company behind Amazon, Shein, Temu, and TikTok Shop shipments, exposed 840 million records including 618 million parcel photos and driver license images. Here's exactly what was in the bucket, how attackers find these leaks, and why misconfigured cloud storage is the #1 exposure vector in 2026.…
On April 1, 2026, an attacker called a Charter employee and walked away with 42 million customer records. No malware, no zero-day, just vishing. Here's exactly how ShinyHunters did it, and why phone-call attacks are bypassing every traditional defense in 2026.…
A viral cybercrime listing claimed 340 million stolen OnlyFans records. Troy Hunt called it fake. The seller admitted he didn't breach OnlyFans. Here's the data enrichment attack that's reshaping how stolen data gets weaponized in 2026.…
Three teenagers in Ukraine stole 610,000 Roblox accounts in 4 months and sold them for $225,000. They never cracked a password. Here's exactly how session cookie theft bypasses 2FA, and why this attack works against every online service.…
The Aisuru botnet hit 31.4 Tbps in November 2025 before the DOJ disrupted it in March 2026. How residential proxy networks broke traditional IP defenses, and what comes next.…