A 32.8M-record Condé Nast user database is on sale for $15,000 on a Russian-language hacker forum. We tested the sample: genuine account data, and the rest of the December WIRED hack.
Ransomnews confirmed 51 ransomware attacks in August 2026, down from 62 in July and 136 a year earlier. Qilin led with nine victims and government was the most affected sector.
A seller is offering 412,192 Latin American ticket-buyer records from The Town 2025, including 250,000 Brazilian CPFs, at about four cents a head. We tested the sample.
The FBI water-sector PLC alert and the Barracuda ransomware breach at supplier Micro-Comm landed a day apart. The evidence says they are not the same story.
A seller is offering 877,000 driver records from UK EV salary sacrifice broker Love Electric, including National Insurance and driving licence numbers. We checked the sample.
Bashe, also known as APT73, tells Dancho Danchev that interviews raise the price of silence. Then the public record shows how much of that reputation is manufactured.
The word delve fell 94% from its 2024 peak while dash use doubled. We measured 21,442 arXiv abstracts: AI writing tells expire in about 18 months.
The group behind RTM Locker speaks to Dancho Danchev about ransomware-as-a-service, why companies really pay, and where the market goes next.
Stripe was not breached. A forum dataset holds live API keys for 659 of its merchants, plus 35GB pulled from them. We told Stripe before publishing this.
A 152,973-message archive of the Verified forum shows how Russian-speaking cybercrime governed itself between 2005 and 2010, using rules, penalty points and bans.