The Rainmaker Report

In this episode, we cover three major cybersecurity incidents: the theft of an AI model evaluator's API key leading to significant financial loss, the evolution of the ClickFix social engineering toolkit, and a massive healthcare data breach affecting millions of patients.

**Story 1: METR API Key Theft Drains ~$600,000 in AI Credits**

Attackers stole an API key belonging to METR (Model Evaluation & Threat Research), an AI safety organization, and used it to consume approximately $600,000 worth...

In this week's cybersecurity roundup, we cover three major stories: infostealer malware draining Anthropic Claude subscriptions, a healthcare breach affecting pacemakers and millions of patient records, and Check Point Research uncovering fake school websites and a new obfuscation technique.

## Story 1: Infostealer Malware Hijacks Claude Sessions

Anthropic has issued a warning about infostealer malware that hijacks active Claude AI sessions to drain usage quotas and steal subscription credenti...

In this video, we cover three major cybersecurity stories: the resurgence of Scattered Spider, a new extortion group targeting Manchester Airports, and an exploited zero-day in PaperCut. Stay informed with the latest threats and patches.

## Story 1: Scattered Spider Returns

Scattered Spider, a notorious cybercrime group, has been linked to a new wave of attacks, including a recent incident involving the ATF and DOJ. The group, known for sophisticated social engineering and ransomware deployment...

Story 1: Two alleged TeamPCP hackers arrested in Australia. The Australian Federal Police (AFP), with the FBI and Western Australia Police Force, charged two men from Western Australia for their alleged roles in the global TeamPCP cybercrime group. The arrests are part of a coordinated international disruption operation targeting the group's ransomware and data extortion activities.

• https://krebsonsecurity.com/2026/08/two-alleged-teampcp-hackers-arrested-in-australia/

• https://www.afp.gov.au/...

Three major cybersecurity stories dominate this week: a social engineering attack on ReliaQuest, a massive Carhartt data breach, and the Lapsus$ gang's GTA 6 extortion. Here is the full breakdown with sources.

**Story 1: ShinyHunters Taunts ReliaQuest After Employee Falls for Social Engineering**

The threat actor ShinyHunters claims to have breached ReliaQuest by tricking an employee through a social engineering attack. ReliaQuest has denied that the attack compromised core systems, but ShinyH...

In this video, we cover three major cybersecurity stories from August 25, 2026.

**AliExpress Fingerprinting Shoppers with Silent Audio**

AliExpress has been accused of using silent audio to fingerprint shoppers, potentially violating privacy. The technique was discovered when a developer's headphones were mysteriously muted, leading to an investigation. This method allows the company to track users across devices and browsers.

• https://www.theregister.com/security/2026/08/24/aliexpress-accused...

Three stories: a rogue ransomware affiliate scamming victims, Microsoft's Windows 11 gaming crash investigation, and Amazon's AI book destruction. Full details below.

Story 1: Rogue Ransomware Affiliate Poses as Recovery Firm to Steal Payments

A ransomware affiliate operating under the name 'Ransom Busters' has been posing as a legitimate recovery firm, contacting victims who have already paid ransoms and demanding additional payments under the guise of recovering their files. The affiliate, wh...

In this video, we cover three major cybersecurity stories from August 19, 2026. First, Microsoft Copilot was tricked into revealing how to hack itself. Second, a cyber incident disrupted student services at UT San Antonio. Third, a hacker claims to have stolen 36 million Azure account records from major companies.

## Story 1: Copilot Tricked Into Telling Researchers How to Hack Itself

Researchers successfully manipulated Microsoft Copilot into disclosing the exact input or prompt that allowed ...

This week in cybersecurity: North Korea's Lazarus Group exploits a Windows zero-day, a Trivy vulnerability leads to a massive supply chain compromise, and the AmnesiaStealer infostealer targets macOS via ClickFix. Here are the details.

## Story 1: Lazarus Group Exploits Windows Zero-Day

The Lazarus Group, a North Korean state-sponsored hacking group, has been observed exploiting a Windows zero-day vulnerability to gain elevated privileges on target systems. The flaw, patched by Microsoft in th...

Microsoft confirmed a global GitHub outage affecting developers worldwide. The incident led to widespread disruptions, with GitHub’s status page confirming ongoing investigations. Multiple sources reported the outage impacting code repositories and collaboration tools.

• https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-github-is-down-worldwide/

• https://cybersecuritynews.com/github-outage-worldwide/

• https://www.githubstatus.com/

License plate cameras are now capable of tra...