Fetching from the wire…
Security2026-09-04 · source-backed
Brian Krebs reported and the FBI confirmed on September 2 that scans attributed to identity-verification vendor IDScan.net went up for sale on a dark web service called Nexus, alongside 10 million ID cards, 3 million travel cards and 579,000 medical cards. Techdirt reports about 400,000 new records were added within 24 hours of public disclosure, meaning the feed was still running. Named customers include Hertz, FedEx and Target. Every downstream product that bolted on a verification vendor inherited a year-long real-time leak it had no visibility into. Techdirt
Each link below shares sources, entities, or timing with this story.
Krebs reported September 1 on an inquiry into idscan.net after a service called "Nexus" launched on the Exploit forum offering 153M US and Canadian licenses, 10M+ ID cards, 3M+ travel documents (KrebsOnSecurity). Records carry timestamps matching ID scans at car rental counter...
CVE-2026-84885, -84886 and -84887 published September 3 against 0.3.1/0.3.2, covering code_agent.py, the OCR HTTP API's ImageData handler via img_bytes, and the model-generated GUI action execution workflow in grounding.py. Same 48-hour window produced the same non-response pa...
Anthropic released Claude Fable 5.1 on September 1. Claude Code v2.1.257 made it the default Fable model at 17:53 UTC that day, with a 1M-token context window, $10 per million input tokens, $50 per million output, and $0.25 per million on cache reads (claude-code CHANGELOG). B...
From September 1, new signups reopen for card and PayPal customers with every seat assignment requiring payment before access; existing card/PayPal customers start incurring upfront per-seat charges October 1. Copilot code review's default effort moves from Lite to Balanced, s...
Marc Benioff said "the UI is the AI" out loud, on the record, about his own product. Then Salesforce released the thing that makes it true. Claudeforce went live for pilot customers on August 26. The centerpiece is "Salesforce in Claude," a Claude Cowork plugin carrying 37 pre...
The Series C, co-led by Atomico and Smash Capital, landed August 12 alongside a product line the company calls agentic change management. Named customers include Adyen, BMW, NVIDIA, Indeed and JFrog, and it's committing over $10M in free review capacity to open source over the...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.