Criminals claiming persistent access to a New Orleans identity verification company are selling scans of more than 160 million North American driver's licenses on a Russian dark web forum, and the FBI confirmed on September 3 it opened a formal investigation after independent researchers verified the authenticity of the data.

Luminis Health's two Maryland hospitals disclosed a cyberattack September 2 that shut down patient portals and forced ambulance rerouting; whether patient data was exfiltrated remains unconfirmed pending forensic review.

By seizing hard-coded command domains, federal authorities shut down a Chinese state-sponsored botnet that had confirmed access to seven federal networks including NASA, the Federal Reserve, and the US Senate.

A coordinated malware campaign breached operational technology systems at more than 30 Minnesota water utilities simultaneously, forcing the Braham treatment plant offline and triggering a statewide emergency cybersecurity response coordinated through MNIT.

Toronto Police say Project Lighthouse disrupted Canada’s first detected SMS-blaster operation, alleging mobile “fake cell towers” pushed large-scale smishing while intermittently disrupting legitimate network access—including potential 911 impacts—leading to three arrests, dozens of charges, and seizure of multiple devices.

Anthropic is withholding Claude Mythos Preview because it appears capable of finding and weaponizing zero-days at a pace that could dramatically accelerate cyberattacks, and Project Glasswing is a race to patch critical software before Mythos-class capability becomes widely accessible to adversaries.