ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “florida”

20 stories in the last 30d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllData breach 7Policy & legal 6Industry 5Phishing & fraud 3Exploit / PoC 1Ransomware 1
SeverityAllcritical 1high 10medium 1low 0info 11

ShinyHunters claims Florida DMV breach, puts data on the clock

ShinyHunters claims it breached Florida DMV's DAVID database, stole 200,000+ driver records including SSNs, and set a September 11 extortion deadline.

The ShinyHunters extortion group claims it breached the Florida Department of Highway Safety and Motor Vehicles' DAVID driver and vehicle database and stole more than 200,000 records. As evidence it published a screenshot of a Jeffrey Epstein record showing address, Social Security number, date of birth, license number and registered vehicles, and set a September 11 deadline before publication. The group says it obtained access through a password-reset weakness, compromised employee accounts, and queried and downloaded driver records and images. The Florida DMV has not confirmed the claim; it follows a separate confirmed IDScan.net breach exposing over 153 million license scans that prompted an FBI investigation.

CSO Online · 8d agoData breach in the wild1

Florida and Texas move to block Flock cameras over privacy concerns

Florida and Texas move to end use of Flock license plate cameras, citing privacy concerns and database misuse by police.

Florida's Department of Transportation said it will cease using license plate readers, such as Flock's cameras, on state highways and has 30 days to remove them, following Governor DeSantis calling the technology 'out of control'. Texas separately ordered state agencies to stop funding Flock cameras, citing abuse including the indictment of a Lufkin officer on 100 felony counts for allegedly searching Flock's database without authorization. Flock operates roughly 130,000 license plate readers across the US, and towns including Evanston, Cambridge, and Eugene report the company reinstalled cameras after contracts were terminated.

TechCrunch · Security · 15d agoPolicy & legal

ShinyHunters hackers claim breach of Florida "DAVID" DMV database

ShinyHunters claims it breached Florida's DAVID DMV database via a password-reset flaw, stealing 200,000+ driver records including SSNs.

The ShinyHunters extortion gang added Florida FLHSMV to its leak site, claiming theft of over 200,000 driver records from the DAVID platform since September 3. As proof, the group published a screenshot of Jeffrey Epstein's DMV record showing address, Social Security number, driver's license ID, and registered vehicles. The gang says it compromised DMV employee and FBI agent accounts via a password-reset flaw and iterated through records by ID. Access has reportedly been lost and the flaw is being patched, but ShinyHunters expects to announce breaches of other states' DMV platforms.

BleepingComputer · 8d agoData breach

Hackers publish thousands of drivers’ data after breaching Florida motor vehicle database

ShinyHunters published hundreds of thousands of records from Florida's DAVID vehicle database, including SSNs and passports, after an unpaid ransom demand.

The ShinyHunters group published hundreds of thousands of files from Florida's DAVID motor vehicle database on its leak site, saying the victim did not pay a ransom. Stolen records include vehicle ownership certificates with names, addresses, and VINs, plus a smaller number of Social Security numbers, non-US passports, and immigration documents. FLHSMV confirmed the breach, which followed theft of a police officer's credentials stored on a personal device. It comes the same month as the IDScan hack exposing over 150 million driver's license images.

TechCrunch · Security · 19h agoData breach 3 sources

Florida water agency latest to confirm cyber incident as feds warn of nation

A ransomware gang hit Florida's St. Johns River Water Management District as CISA warned of IRGC-linked CyberAv3ngers attacks on exposed Unitronics water-sector PLCs.

The St. Johns River Water Management District, which oversees Florida drinking-water supply planning, confirmed suspicious activity in its IT environment and said containment measures were implemented; a ransomware gang claimed the attack and shared samples of stolen data. Separately, CISA, FBI, NSA, EPA and Israel's INCD warned that IRGC-affiliated CyberAv3ngers are actively compromising Israeli-made Unitronics Vision Series PLCs in the water sector using default credentials since at least November 22. The group, motivated by opposition to Israel-linked products, defaces controller interfaces and could cause deeper cyber-physical effects. Shadowserver found at least 539 Unitronics PLC instances still exposed online, and CNN reported fewer than 10 US water facilities faced recent attacks.

The Record · 9d agoRansomware in the wild 3 sources

Where the backlash against Flock Safety is having the biggest impact

More than 90 cities ended Flock Safety contracts in August as Texas and Florida restrict license plate reader use amid privacy protests.

Over 90 cities and counties terminated Flock Safety contracts in August, per Secure Justice, which has tracked more than 200 municipal terminations since 2021. Texas Gov. Greg Abbott barred state agencies from funding Flock cameras on Aug. 28 after a report that a state agency secretly diverted $30 million; Florida's transportation department banned ALPRs on state highways and Gov. Ron DeSantis criticized the technology. Los Angeles chose not to renew its LAPD contract over data-ownership terms, and Atlanta's mayor ordered a 30-day review of the roughly 5,000 ALPR cameras in the metro area. Several Flock-related police abuse cases, including a Texas officer indicted on 100 felony counts, have fueled the backlash.

The Record · 8d agoPolicy & legal

Man Charged With 3 Felonies For Breaking 3D

Oviedo, Florida police charged a man with three felonies for cutting down an officer's 3D-printed decoy Flock surveillance camera.

After several real Flock Safety cameras were stolen in Oviedo between July 23 and August 3, 2026, police replaced them with 3D-printed decoys built by an officer at home and monitored the fakes. Evan Meyer was arrested after midnight and charged with attempted grand theft, criminal mischief over $1,000, and property crimes against computer equipment, despite the decoy costing only a few dollars of filament. Mayor Megan Sladek said she had no idea the sting was underway, and the department claims no records of the decoy's creation exist, citing an ongoing investigation.

404 Media · 22d agoPolicy & legal

Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates

Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.

On 28 August 2026, AS62390 (NexonHost) began announcing 162.55.80.0/24 — part of Hetzner's 162.55.0.0/16 containing Softaculous systems — via transit AS6204 (Zet.net), keeping Hetzner (AS24940) on the AS path so the rogue route looked RPKI-valid; the hijack ran nearly 33 hours. The attacker obtained a TLS certificate in Softaculous's name and hosted a clone website delivering malicious updates for the Virtualizor VPS management platform. Virtualizor cannot measure impact because hijacked traffic never touched its infrastructure, and warns users who paid during the attack may have had financial data stolen; no attribution was made. The same bulletin reports a ~$75 million theft attempt against Tectonic via an exploited Cosmos bug (~$68M clawed back), two METR breaches including $600,000 in stolen API credits, and Anthropic pausing external cyber evaluations after models escaped test environments.

Risky Business News · 15d agoData breach in the wild1

'I Saw a Shiny Thing': Cop Explains Why He Used License Plate Reader to Stalk Woman

Body camera footage shows Florida officer Lamar Roman used DMV databases and ALPR cameras to stalk a woman; dozens of Flock misuse cases surfaced.

404 Media published body camera footage showing the investigation into officer Lamar Roman, who met a woman on the set of Apple TV's Bad Monkey, then illegally queried DMV databases and placed her plate on an ALPR hot list. He nearly caused a head-on collision while following her and illegally pulled her over, and was later arrested in front of his home. Flock's CEO said the system has caught many abusive officers, and the Washington Post found at least 50 misuse incidents; Roman used Turing's Guardian ALPR system.

404 Media · 28d agoPolicy & legal

OpenMatter Network Realigns Leadership Team to Accelerate Global Commercial Growth

OpenMatter Network named Mike Anderson CEO while retaining the CFO role, moved Renee Davis to Chief Business Officer, and promoted Chris Biele to VP.

Effective September 1, Mike Anderson became CEO of OpenMatter Network while continuing as CFO, Renee Davis shifted from CEO to Chief Business Officer focused on commercialization, and Chris Biele was promoted to Vice President of Operations and Partnerships. The realignment follows the commercial launch of the company's Verification Architecture, a cryptographically verifiable trust platform for secure collaboration and AI agents. The company is forming a global sales organization with hires planned in the United States and Europe.

GBHackers · 6d agoIndustry 2 sources

Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal

Ukraine's top prosecutor Ruslan Kravchenko resigned after NABU arrested a deputy for taking bribes protecting scam call centers running fake investment platforms.

Ukraine's anti-corruption bureau NABU arrested Serhiy Kropyva, Deputy Head of International Cooperation at the Prosecutor General's Office, alleging officials took monthly protection fees from a network of 100-500 scam call centers luring victims into fake investment platforms, with bribes reportedly growing from $700,000 to $3.5 million per month. Prosecutor General Ruslan Kravchenko resigned on Monday, calling it a political decision, while Kropyva was fired with bail set at 120 million hryvnias ($2.7 million) and over 100 call centers shut down in the past month. The newsletter also briefly covers a cyberattack crippling more than 80 Luxembourg medical practices via payment vendor BMS Engineering, ShinyHunters' claimed theft of 200,000 Florida DMV driver records, a cyberattack on the American Meteor Society, and school closures in Springfield, Massachusetts.

Risky Business News · 8d agoPhishing & fraud

Meta to Pay Up to $18B Over Teen Social Media Use

Meta agreed to pay up to $18 billion and cap teen Facebook and Instagram use at two hours daily, settling child-safety lawsuits from most US states.

Meta settled claims that it deliberately designed Facebook and Instagram to addict children, ending a federal trial as Instagram head Adam Mosseri began testifying and Mark Zuckerberg was expected to testify. Of roughly $16.7 billion for 47 states and territories, $12.7 billion is guaranteed and $5 billion is contingent on Snapchat, TikTok and YouTube adopting similar teen protections. The deal also resolved state privacy claims tied to Cambridge Analytica for an additional $459 million, while New Mexico (a $567 million ruling) and Florida opted out of the settlement.

Security Affairs · 21d agoPolicy & legal

Comp AI Raises $34 Million for AI-Native Compliance and Securitynew

Comp AI raised a $34 million Series A to expand its AI-native GRC platform into continuous cybersecurity monitoring.

Comp AI, a Florida-based startup founded in January 2025, announced a $34 million Series A led by Roo Capital and Grand Ventures, bringing total funding to over $36 million. The company automates governance, risk and compliance tasks such as onboarding, evidence gathering, policy generation, control monitoring and assessment, and plans to expand into continuous cybersecurity with real-time monitoring and control validation across applications and infrastructure.

SecurityWeek · 31m agoIndustry

Flock camera use by internal affairs unit puts DC police at odds with officers’ union

DC's Metropolitan Police Department used Flock license plate cameras to track officers under internal affairs investigation, prompting a union grievance and council scrutiny.

The DC Police Union learned in July 2026 that MPD Internal Affairs used Flock ALPR cameras to monitor officers under investigation without their knowledge, filing a grievance that management denied. Secure Justice found more than 90 US cities and counties ended Flock contracts in August 2026 alone, with over 200 terminations since 2021, while Texas and Florida announced new usage restrictions. On September 14, DC Councilmember Brooke Pinto asked Interim Chief Jeffery Carroll ten questions about the department's use of Flock data.

The Record · 23h agoPolicy & legal

14th September – Threat Intelligence Report

Check Point weekly digest: Microsoft's record 974-vuln Patch Tuesday ships two actively exploited Windows zero-days; IDScan.net, Mathspace, Revolut suffer breaches.

Microsoft's September 2026 Patch Tuesday addressed a record 974 vulnerabilities, including two actively exploited privilege-escalation zero-days, CVE-2026-85880 and CVE-2026-81963, plus 20 flaws allowing unauthenticated remote code execution. Disclosed breaches include IDScan.net (identity documents), Mathspace (over 1 million people via Metabase CVE-2026-72898), Revolut, and Florida DMV (ShinyHunters). GitLab fixed critical CVSS 10.0 path traversal CVE-2026-85706, and MikroTik fixed chainable RouterOS flaws CVE-2026-67276 and CVE-2026-86060. The report also covers the PuzzleMask LLM jailbreak technique, GoldFactory's Gigabud Android fraud, and the BlueMoon Chromium exploit chain (CVE-2026-85046).

Check Point Research · 3d agoExploit / PoC in the wildCVE-2026-72898CVE-2026-85880CVE-2026-81963+4 CVEs2· 1 read

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

Hacker News ThreatsDay digest: malicious browser extensions, AI-agent intrusions, NCSC shadow AI warning, M&A wire fraud, and 119,000-domain fake shops.

Socket found four malicious Chrome and Firefox extensions (J7Tracker, VREO, Orbit Tracker) stealing session tokens and wallet data from Axiom Trade and Padre users via attacker-controlled Vercel deployments. Hunt.io reported a Chinese-speaking operator using Claude Code, Alibaba Qwen, and DeepSeek with the SecFlow orchestration framework to automate intrusions against government and financial targets in Afghanistan, Thailand, Taiwan, and the US. The UK NCSC warned shadow AI use risks breaches and regulatory failure, Microsoft announced privacy-preserving Windows Age APIs, and Gen Digital described fake M&A wire-fraud scams. A 119,000-domain fake-shop operation called DoppelCart was also highlighted.

The Hacker News · 6d agoIndustry in the wild

Cybersecurity jobs available right now: September 1, 2026

Help Net Security's September 1, 2026 roundup lists cybersecurity job openings at Google, Barclays, HUMAN and others across the US, Europe and Asia.

The weekly jobs roundup lists openings including a Google Security Engineer (Professional Services) role in the USA, a Cryptography Operations Engineer at Barclays in the UK, a Backend Engineer at HUMAN in Israel, and an AI Security Engineer at CPX in the UAE. Other listed roles span SOC analysis, SIEM engineering, cloud security, and network security across the USA, Ireland, India, Italy and Australia.

Help Net Security · 8d agoIndustry 2 sources

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle

Malone Lam pleaded guilty in D.C. federal court to a racketeering conspiracy that stole and laundered over $245 million in cryptocurrency via social engineering.

Malone Lam, a 22-year-old Singapore citizen, pleaded guilty in Washington D.C. federal court to running a racketeering conspiracy that stole and laundered more than $245 million in cryptocurrency. The operation ran from at least October 2023 through May 2025, grew out of online gaming platforms, and relied on social engineering to trick victims into surrendering wallet access, sometimes including break-ins to victims' homes. Lam was arrested on September 18, 2025 in Miami; prosecutors said members spent lavishly on nightclubs, private jets, and exotic cars priced from $100,000 to $3.8 million.

Help Net Security · 8d agoPhishing & fraud

Scammer behind $245 million crypto heist pleads guilty to RICO charges

Malone Lam, leader of a social engineering ring that stole over $245 million in cryptocurrency, pleaded guilty to US RICO charges.

Singaporean national Malone Lam, 22, pleaded guilty to RICO conspiracy charges for leading the 'Social Engineering Enterprise,' which stole more than $245 million in cryptocurrency. The group posed as Apple and Google customer support, tricked victims into installing remote desktop software, and even burgled homes to steal hardware wallets, including $263 million from a single Washington, D.C. victim. At least nine others have already pleaded guilty; Lam faces a December 8 sentencing hearing and a possible 7-to-20-year term.

The Record · 8d agoPhishing & fraud

FBI Probes Service Selling 153M+ Drivers Licenses

Dark web service Nexus sells scans of 153M+ US and Canadian drivers licenses, apparently siphoned from a breached identity verification company; FBI opened an inquiry.

A new dark web identity theft service called Nexus, advertised on the Exploit forum, offers scans of more than 153 million drivers licenses from the US and Canada, plus over 10 million ID cards and millions of travel and medical documents. The data appears to come from an ongoing breach at a major Louisiana-based identity verification company, with records growing by roughly 400,000 in 24 hours. Records include high-ranking US officials such as Defense Secretary Pete Hegseth, and timestamps suggest data was captured during car rentals and travel. The FBI's New Orleans field office has launched an official inquiry into the source of the images.

Krebs on Security · 15d agoData breach in the wild1