Marc David @marc_david

A verified game on Steam stole $32,000 from a cancer patient. It was safe at first. Then the dev updated it with a crypto-draining payload. He downloaded the game during a fundraising stream. His wallet was emptied—live.

The FBI says fake versions of its IC3 cybercrime site are tricking people. Scammers copy the site using small URL changes to steal your info. They want your name, address, phone, email, and bank data. Type ic3.gov directly.

Everyone is using ChatGPT to write job applications. And HR is using AI to reject them. No one is getting hired—people apply to 200 roles and hear nothing. It's not a hiring freeze. It's an algorithm war. And workers are losing.

TransUnion leaked data from 4.4 million people. Attackers stole it through a third-party Salesforce app. The breach included Social Security Numbers. Same group hit Google, Cisco, and others. Your credit profile isn’t private anymore.

TikTok Shop is selling GPS trackers marketed for spying on partners. One video shows how to hide it in a car. Says it’s "silent, undetectable, always on." Over 100,000 units sold. TikTok says it's banned — but dozens of similar videos are still live. How is this allowed?

AI just topped HackerOne’s leaderboard. No humans. No hype. XBOW’s bot found 285 real bugs across 17,000 apps. LLMs guess. Code verifies. That’s the difference.

AI voice scams are exploding. Attackers clone a loved one’s voice, pretend there’s an emergency, and demand money or passwords. They use public voice clips and hit dozens at once. It works—because it sounds real. Use a passphrase with family. Call back on known numbers

38GB of personal data sat unprotected on IMDataCenter’s AWS server. One hacker grabbed it all—names, emails, phone numbers, even Social Security numbers. The company didn’t respond to alerts until after the breach. Business as Usual

UK’s new age checks are live. To visit a website, users now upload ID or scan their face. VPN downloads in the UK spiked 1,800% in days. But even VPNs are being targeted next. This isn’t safety—it’s surveillance.

A women’s safety app leaked 1.1M private messages. Chats included abortions, cheating, real names, and phone numbers. Hackers also downloaded selfies and driver licenses. Some of it got ranked on a “hot or not” site. Tea said the data was old—turns out it was from last week.

Hackers breached Allianz Life’s CRM system. They stole personal data from most of its 1.4M US customers. The attack used social engineering, not a system flaw. Allianz says core systems were untouched—but it’s offering 24 months of credit monitoring. Oh boy! Credit monitoring

Amazon shipped AI code that told computers to wipe themselves. A hacker slipped the command into a GitHub pull request. Amazon accepted it — without noticing. Almost 1 million users downloaded the extension. Who’s reviewing AI code before it goes live?

A startup is selling hacked browser data to debt collectors. $50 gets you access to stolen addresses, logins, and autofill info. Victims got infected by malware bundled into pirated software. Now lawyers, rivals, and stalkers are mining that data. No law stops this—yet

A single weak password ended a 158-year-old company. 700 people lost their jobs. The hackers encrypted everything and demanded millions. KNP couldn’t pay. They shut down. Your weakest link isn’t technology—it’s your team’s next bad password.

Hackers can stop American trains with a cheap device. The tech has been vulnerable since 2012. The rail industry ignored warnings for over a decade. AI tools make building the exploit easier than ever. The fix still isn’t done.

Loved my eSIM—until now. New research shows hackers can clone, spy on, even brick your eSIM using old Java Card flaws. Just a moment of physical access is enough. Lock your phone. Don’t hand it to strangers. Convenience comes with risk.

A Chrome extension with 100k+ downloads hijacked to spy on users. Functions like a normal color picker. It tracks every site you visit and can redirect you to malware. It’s verified and promoted by Google. Live on the store. Delete "Color Picker, Eyedropper — Geco colorpick"

Google just gave Gemini access to your apps. Even if you turned the features off. Messages, calls, timers—Gemini can interact with them starting today. To block it, you need to change hidden settings or uninstall it with developer tools. Most users won’t know.

The Trump admin created a national citizenship database pulling data from DHS and Social Security. Officials say it helps stop voter fraud—but privacy experts warn it may violate federal laws and enable mass surveillance. Safeguard or overreach?

Qantas confirmed a data breach impacting up to 6 million flyers. Attackers accessed info through a third-party call center. The names and contacts were exposed. The group behind it? Scattered Spider—experts in social engineering. Airlines aren’t leaking data—vendors are.