Day’s Recap is unavailable for this topic and date. Feel free to go through our curated list of stories below.
Other Developments
A curated list of other prominent stories from this day.
5:55 PMThe Verge
Nearly a million passports and photo IDs were left unprotected on the public internet
Summary
A large trove of passports and other government photo IDs was exposed on the open internet with little to no access control, allowing outsiders to view highly sensitive identity documents. The exposed files included full document images that can be used for identity theft and fraud.
Why it matters
Exposed passport and ID scans enable rapid, high-confidence identity fraud and force banks, travel firms, and verification providers to treat document retention and access control as critical security controls.
Hackers Breach 20K Instagram Accounts Due to AI Bug
Summary
An AI chatbot vulnerability in Instagram was exploited last month, affecting 34,000 accounts. About 20,000 accounts were breached, allowing attackers to access personal data.
Why it matters
It shows how AI-enabled product surfaces can become high-impact compromise paths that scale quickly across consumer accounts.
The Gentlemen has quickly become the second most active ransomware group by victim count by offering affiliates 90 percent of paid ransoms and recruiting aggressively. The post assembles operational clues that point to a likely real world identity for the group’s administrator.
Why it matters
A high commission RaaS model can rapidly scale attacks, and attribution of the operator is the key pressure point for disrupting that growth.
WhatsApp detected NSO Group attempting to phish WhatsApp users with spyware-style tactics. The activity allegedly violated a court order barring NSO from targeting WhatsApp and its users.
Why it matters
A court order that does not stop a spyware vendor signals weak deterrence and raises the stakes for both platform security and legal remedies against commercial surveillance.