‼️ Hackers breached Arizona's state court system and have copied personal data on many Arizonans, including the confidential addresses of people with current or past protective orders.

The court is now notifying those affected as the FBI investigates, saying it's unclear whether most of the data can be easily read and there's no evidence it has been shared.

‼️ BREAKING: A ShinyHunters suspect known as 'Umbreon', aka Pepijn van der Stap, was arrested a couple of weeks ago, according to Krebs.

He's a 23-year-old convicted Dutch hacker who was on parole and detained again around September 16 on suspicion of aiding ShinyHunters data thefts and extortions.

Days later, ShinyHunters claimed a hack of the FBI's jobs site and left an Umbreon defacement that sources say was likely a rival's attempt to pin it on him.

https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/

‼️ UPDATE: ShinyHunters denies any link to Pepijn van der Stap, the convicted Dutch hacker that sources identify as the man arrested in the investigation into the gang.

"That individual has no association with us. Frankly, we are laughing," the group told Hackread, calling Dutch police incompetent and attention-seeking.

Dutch police confirmed they arrested a 24-year-old Amsterdam man but have not named him. He faces a closed-door hearing at the Rotterdam court on Tuesday.

❗️ An AI agent broke out of its virtual machine and triggered a use-after-free in Google's heavily hardened hypervisor by tricking KVM into quietly rewriting a memory-mapping entry with a single three-byte instruction.

It then flooded the host with 49,152 memory mappings until KVM followed a pointer into that freed memory, and on its fourth live attempt the host handed over Google's secret flag.

No one gave it an exploit, so the agent spent weeks studying KVM's source code and wrote 14,338 lines of harness code to get there.


https://pwn.ai/blog/kvmescape

‼️ Anthropic's great steal has gone from content to train its AI to IceSolst's photo, which now appears in the Claude Sonnet 5.5 release promo video, without giving credits or asking permission.

‼️ BREAKING: German file-transfer provider FTAPI, used by government agencies and more than 2,000 companies, has confirmed a ransomware attack after The Gentlemen gang listed it on its leak site.

The company says attackers breached a single internal server on September 14 but that its platform and customers' systems and data were not affected.

A countdown on the leak site shows about five days left.

‼️ BREAKING: A newly released jailbreak cracks every PS5 firmware from 7.00 to 13.60, and early testers say it loads in seconds and works on the PS5 Pro too.

All it takes is visiting a website in the browser.

It chains a WebKit browser bug with a kernel use-after-free race to seize kernel read/write, then loads payloads for homebrew and game backups.

https://github.com/ntfargo/Relapse-Exploit

The CIA and West German intelligence secretly bought Swiss encryption maker Crypto AG in 1970, turning the machines governments paid to protect their secrets into a way to read them.

Those governments had no idea the machines were rigged to read their messages.

In the 1980s, Crypto devices accounted for roughly 40% of the foreign government messages the NSA decoded.

The CIA didn't sell the company until 2018 and called the operation "the intelligence coup of the century."