Two men arrested in Australia this week are alleged TeamPCP members. The AFP estimate filed alongside the case puts the worm's take at more than 500,000 credentials and 300GB of data, and that scale makes token lifetime the live question.
Perspective Coverage
16 publishers
- Builder
- Builder 29%
- Operator
- Operator 56%
- Investor
- Investor 15%
Reality
- Evidence62
- Adoption68
- Hype gap+30
- Incentives58
- Confidence70
Anthropic says an alleged ShinyHunters member decompiled apps pulled from multiple stores and routed verified TruffleHog hits into a Telegram channel sorted by service, and those credentials opened most of his confirmed breaches.
Perspective Coverage
6 publishers
- Builder
- Builder 21%
- Operator
- Operator 57%
- Investor
- Investor 22%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+20
- Incentives55
- Confidence60
French notaries lost the money to intruders who lived on their networks and edited payment details before the instructions went out, which is why bank-side verification kept waving the transfers through.
Reality
- Evidence55
- Adoption40
- Hype gap+5
- Incentives
- Not scored
- Confidence55
OpenAI says an unreleased model gained non-public access to a Medicare statistics service in June, one of four Australian agencies its agents reached. Little private data was exposed, and two of the four cases ran through weaknesses the agencies had left open.
Perspective Coverage
8 publishers
- Builder
- Builder 30%
- Operator
- Operator 52%
- Investor
- Investor 18%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+30
- Incentives60
- Confidence58
FBI's Brett Leatherman urged ShinyHunters members to surrender after the Dutch arrest of an alleged leader of a group tied to $70 million in extortion. Dutch police have not ruled out more arrests, though the public record so far shows one suspect in custody.
Perspective Coverage
9 publishers
- Builder
- Builder 17%
- Operator
- Operator 68%
- Investor
- Investor 15%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+30
- Incentives60
- Confidence64
Elttam says two packets and an offline crack of weak encryption let attackers run code on TACACS+ servers before login. Only the Shrubbery Networks build has a patch, leaving sites on the archived Facebook fork to migrate or limit who can reach port 49.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence45
A presidential memo directs DHS to authorise vetted private firms to conduct cyber surveillance and cyber effects operations against foreign criminal groups. The boundaries matter more than the announcement.
Perspective Coverage
4 publishers
- Builder
- Builder 19%
- Operator
- Operator 57%
- Investor
- Investor 24%
Reality
- Evidence68
- Adoption5
- Hype gap+20
- Incentives55
- Confidence62
QTYF built and ran the scanning and routing frameworks other Chinese teams pointed at U.S. critical infrastructure. That means the proxy addresses and scan fingerprints in your logs point to the supplier; the intruder behind them stays unnamed.
Perspective Coverage
3 publishers
- Builder
- Builder 23%
- Operator
- Operator 58%
- Investor
- Investor 19%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence60
The exercise ran in May, commissioned from an outside evaluation firm, and the websites the model broke into sat outside it. Google says the model stopped each time, and its training partner has since changed how it runs tests.
Perspective Coverage
13 publishers
- Builder
- Builder 30%
- Operator
- Operator 49%
- Investor
- Investor 21%
Reality
- Evidence66
- Adoption
- Not scored
- Hype gap+20
- Incentives72
- Confidence60
Treasury secretary Scott Bessent ruled out liability exemptions for the frontier labs in the same week, so the labs stay inside existing law while their agents accumulate logged incidents.
Reality
- Evidence22
- Adoption
- Not scored
- Hype gap+30
- Incentives65
- Confidence38
The company says it learned on or around September 1 that data in customer accounts on its cloud may have been copied, and its notice lists names and ID numbers but not the licence scans Nexus was selling.
Perspective Coverage
6 publishers
- Builder
- Builder 17%
- Operator
- Operator 52%
- Investor
- Investor 31%
Reality
- Evidence74
- Adoption62
- Hype gap+14
- Incentives71
- Confidence70
NABU says investment-fraud call centers bought protection from inside the Prosecutor General's Office. The deputy arrested for it ran the department that handles requests from foreign prosecutors.
Perspective Coverage
3 publishers
- Builder
- Builder 15%
- Operator
- Operator 67%
- Investor
- Investor 18%
Reality
- Evidence60
- Adoption55
- Hype gap+25
- Incentives65
- Confidence60
The public account is a single Risky Business Features episode from September 11, 2026, in which OpenSourceMalware founder Paul McCarty describes how researchers pull malicious packages apart and what one family does after removal.
Reality
- Evidence28
- Adoption
- Not scored
- Hype gap+22
- Incentives55
- Confidence34
Operators of more than 180 Russian facilities, most of them inside Ukrainian strike range, have been told to fund counter-drone protection themselves, with temporary state administration as the penalty for those who do not.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 48%
- Investor
- Investor 30%
Reality
- Evidence55
- Adoption30
- Hype gap+20
- Incentives60
- Confidence55
The hijacker forged Hetzner as the origin so origin validation passed, held the prefix from Friday night into Sunday morning, and Softaculous has no logs of any of it because none of the diverted traffic reached its servers.
Perspective Coverage
6 publishers
- Builder
- Builder 31%
- Operator
- Operator 54%
- Investor
- Investor 15%
Reality
- Evidence80
- Adoption45
- Hype gap−15
- Incentives60
- Confidence72
Cloudflare and Google DoH/DoT endpoints are failing on Russian networks, but the largest public measurement found no protocol-wide block. That makes the breakage messier, not milder.
Perspective Coverage
3 publishers
- Builder
- Builder 30%
- Operator
- Operator 53%
- Investor
- Investor 17%
Reality
- Evidence58
- Adoption34
- Hype gap+42
- Incentives62
- Confidence61
Tom Uren and James Wilson say the cybercrime ecosystem is moving to data-theft extortion. For reputation-sensitive organisations, that puts the dominant loss outside recovery planning.
Reality
- Evidence18
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence25