The Exploit Post

Sign in Subscribe

Red Dog Security

Law Enforcement Shuts Down Fake Identity Creation Service VerifTools

Law Enforcement Shuts Down Fake Identity Creation Service VerifTools

The FBI and Dutch police have announced the takedown of VerifTools, an underground marketplace that specialized in producing fake identity documents. During the operation, authorities seized both physical and virtual servers located in Amsterdam. A Marketplace for Fake IDs VerifTools operated as a large-scale platform for creating and selling fraudulent

NX Falls Victim to Supply Chain Attack: Hackers Steal Thousands of Secrets

NX Falls Victim to Supply Chain Attack: Hackers Steal Thousands of Secrets

The maintainers of NX have disclosed a major supply chain attack, dubbed s1ngularity, which occurred on August 26, 2025. The compromise of a developer’s token allowed attackers to publish malicious versions of the popular npm package and related tools, enabling them to steal user data on a large scale.

Government Institutions in Nevada Closed Due to Cyberattack

Government Institutions in Nevada Closed Due to Cyberattack

The U.S. state of Nevada has suffered a large-scale cyberattack, forcing the temporary closure of government institutions and disrupting multiple state services. The incident, which began last weekend, has left authorities working for days to restore operations. Scope of the Disruption The attack affected government websites, telephone systems, and

Anthropic: Hackers Used Claude in a Large-Scale Cyber Operation

Anthropic: Hackers Used Claude in a Large-Scale Cyber Operation

Anthropic reports that it has disrupted a large-scale malicious campaign in which attackers used its AI model, Claude, to steal personal data and extort ransoms that sometimes exceeded $500,000. In its published report, the company warns that AI-powered tools are increasingly being weaponized for cybercrime and fraud. To counter

Popular Password Managers Vulnerable to Clickjacking

Popular Password Managers Vulnerable to Clickjacking

A new study has revealed that six of the most widely used password managers—together serving tens of millions of users—are vulnerable to clickjacking, a technique that could allow attackers to steal credentials, two-factor authentication (2FA) codes, and payment card data. Independent security researcher Marek Tóth disclosed the findings

Researchers Discover PromptLock — The First AI-Powered Ransomware

Researchers Discover PromptLock — The First AI-Powered Ransomware

Security specialists at ESET have uncovered an unusual piece of malware named PromptLock, described as the first known ransomware to leverage artificial intelligence. According to the researchers, PromptLock is not yet fully functional and appears to be in the development stage. Nonetheless, variants targeting both Windows and Linux have already

DDoS Attack on Arch Linux Disrupts Project’s Website, Repository, and Forums

DDoS Attack on Arch Linux Disrupts Project’s Website, Repository, and Forums

The Arch Linux team reports that it has been battling a sustained DDoS attack for more than a week, severely disrupting access to several of the project’s key resources. The attack, which began on August 16, has intermittently affected the Arch User Repository (AUR), the official website, the Wiki,