The Rainmaker Report

✈️ Air France Data Breach Exposes 2M+ Records ✈️ Threat actors claim access to Air France admin panel exposing over 2 million customer purchase records including PII, Flying Blue loyalty data, and booking details. If you've ever flown Air France, your data might be at risk. Sources: • https://darkwebinformer.com/threat-actor-claims-air-france-vulnerability-exposes-2-million-customer-records-via-ad...

#openclaw (formerly Clawdbot/Moltbot) exploded to 160,000 GitHub stars in 6 weeks and represents a fundamental shift in AI: autonomous agents that execute terminal commands, manage emails, and operate 24/7 without human oversight. This isn't a chatbot. It's AI with hands. In this 30-minute talk, I break down the security nightmare keeping CISOs awake: active vulnerabilities (CVE-2026-25253), 1.5 m...

⚠️ Chinese Hackers Hijack Notepad++ Updates for Months ⚠️ Chinese state-sponsored hackers compromised Notepad++ update infrastructure from June through December 2025, delivering malware to select targets via hijacked hosting provider. The attack used Microsoft Warbird obfuscation APIs and went undetected for half a year. Sources: • https://www.bleepingcomputer.com/news/security/notepad-plus-plus-u...

🚨 CISA Director Uploaded Classified Docs to ChatGPT (After Failing Polygraph) 🚨 The acting Director of CISA, America's top cybersecurity agency, uploaded classified government documents to public ChatGPT four times. He specifically requested access even though it's blocked on DHS networks. Oh, and he failed a polygraph test before getting the job. Classic "do as I say, not as I do." Sources: - h...

📦 That WinRAR "Free Trial" You Never Paid For? Hackers Are Exploiting It Right Now 🚨 A WinRAR vulnerability patched last July (CVE-2025-8088) is still being actively exploited by Russian APTs, Chinese threat actors, and cybercrime gangs six months later. The path traversal flaw lets attackers slip malicious files into your system when you extract see...

💔 10M Dating App Users Exposed in Match Group Breach 💔 ShinyHunters cybercrime group claims to have stolen over 10 million records from Match Group (NASDAQ: MTCH), owner of Tinder, Hinge, Match.com, and OkCupid. The alleged breach, posted January 28, 2026, includes user behavioral data from Appsflyer analytics (swipes, matches, sessions, geo-locations), hundreds of internal corporate documents,...

🤖 Hundreds of Clawdbot Servers Exposed with API Keys & Private Chats 🔓 Security researchers have discovered hundreds of publicly exposed Clawdbot control servers containing API keys, private messages, and OAuth credentials. The viral AI assistant, which went mainstream over the weekend, has critical authentication vulnerabilities allowing unauthorized access to users' complete chat histories, fi...

🇬🇧 UK Lords Vote to Ban VPNs for Kids 🇬🇧 The UK House of Lords voted 207 to 159 to ban VPNs for anyone under 18, claiming it will prevent children from bypassing age verification on social media and adult content. The amendment would require VPN providers to implement age verification, likely through government IDs or facial scans. Privacy advocates are calling it surveillance infrastructure disgu...

🎵⚖️ Spotify Pulled Off a SECRET LAWSUIT to Stop Pirates Who Stole 300TB of Music 🎵⚖️ Shadow library Anna's Archive, which scraped nearly 300 terabytes of Spotify's music catalog in December 2025, lost its primary .org domain after Spotify and major record labels filed a sealed lawsuit and secured a court order before the site even knew it was being sued. A federal judge granted a preliminary inj...

🤖 NVIDIA & Meta Caught Pirating 500TB to Train AI Models 🏴‍☠️ Billion-dollar tech companies got caught red-handed downloading hundreds of terabytes of pirated books to train their AI. NVIDIA literally asked a piracy site for 500TB of stolen content, got WARNED it was illegal, and said "send it anyway." Meanwhile Zuckerberg's playing dumb even though internal messages show he approved it…classic...

🚨 LastPass Phishing Alert: Fake Backup Emails Target Your Master Password 🔐 LastPass users are being targeted by a phishing campaign that started January 19th, with fake emails claiming urgent maintenance requires vault backups within 24 hours. The emails redirect victims to malicious sites attempting to steal master passwords. The campaign was deliberately launched during the MLK holiday weeken...

🚨 ESA Breached Twice in 2 Weeks: Space Mission Data Stolen 🚀 - https://cisoseries.com/cybersecurity-news-esa-confirms-new-data-heist-ni8mare-lets-hackers-hijack-n8n-servers-taiwan-blames-cyber-army-for-intrusion-attempts/ - https://www.theregister.com/2026/01/07/european_space_agency_breach_criminal_probe/ - https://www.space.com/space-exploration/esa-email-credentials-on-dark-web - https://www....

🚨 CyberArk Labs Hacks the Hackers with XSS on StealC Credential Stealing Malware. 🚨 • https://www.cyberark.com/resources/threat-research-blog/uno-reverse-card-stealing-cookies-from-cookie-stealers • https://www.bleepingcomputer.com/news/security/stealc-hackers-hacked-as-researchers-hijack-malware-control-panels/ • https://www.bleepingcomputer.com/news/security/stealc-hackers-hacked-as-researcher...

🇨🇳🛡️ China orders firms to drop US and Israeli cybersecurity software, major vendors hit 🛡️🇨🇳 China has told domestic companies to stop using cybersecurity products from a list of US and Israeli firms, citing national security concerns. The move could force rapid tool replacements inside networks where security platforms have deep visibility into traffic and identity. • https://www.reuters.com/wor...

🚨 BREAKING: Russian Hackers Use Simple Copy-Paste Trick to Steal Your Entire Microsoft Account 🚨 A sophisticated phishing attack called ConsentFix exploits OAuth vulnerabilities by tricking users into copying and pasting a malicious URL that contains their Microsoft authorization code. Attackers exchange this code for access tokens, gaining full account access without passwords or MFA, and the t...

Apex Legends match hack: During a live Apex Legends Global Series tournament, someone pushed cheats onto pro players mid match. Players suddenly had aimbot and wallhacks they never installed. The attacker appeared to hijack controls in real time, which points to a serious security hole in the game or its tournament environment. BreachForums data breach: BreachForums got breached. Data tied to abou...

T-Mobile Hacked - https://topclassactions.com/lawsuit-settlements/t-mobile-data-breach-2026 - https://www.cisa.gov/news-events/t-mobile-breach-2026 - https://www.bloomberg.com/news/articles/2026-01-11/t-mobile-breach - https://www.bleepingcomputer.com/news/security/t-mobile-breach-2026/ Bank Infra Takedown - https://www.securityweek.com/feds-seize-password-database-used-in-massive-bank-account-tak...

First up: Instagram is dealing with a massive data leak affecting 17.5 million users. If you've been getting random password reset emails, you're not alone. I'll break down what happened, what data was exposed, and the critical steps you need to take right now to protect your account. Next: Iran's nationwide protests have sparked an unprecedented internet blackout, with the government deploying mi...

Illinois man charged with hacking Snapchat accounts to steal nude photos - https://www.bleepingcomputer.com/news/security/illinois-man-charged-with-hacking-snapchat-accounts-to-steal-nude-photos/ - https://storage.courtlistener.com/recap/gov.uscourts.mad.293918/gov.uscourts.mad.293918.1.0.pdf - https://www.justice.gov/usao-ma/pr/former-college-track-and-field-coach-sentenced-five-years-prison-sext...

📱 Critical Android Dolby Flaw Can Hijack Your Phone 📱 - https://www.securityweek.com/critical-dolby-vulnerability-patched-in-android/ - https://source.android.com/docs/security/bulletin/2026/2026-01-01 - https://social.cyware.com/cyber-security-news-articles 🐱Black Cat Ransomware SEO Poisoning Campaign🐱 - https://thehackernews.com/2026/01/black-cat-behind-seo-poisoning-malware.html - https://w...

Martha Root dressed as Pink Power Ranger takes down white supremacist dating website live on stage. - https://x.com/IntCyberDigest/status/2007183888377118750 - https://en.rattibha.com/thread/2007183888377118750 - https://media.ccc.de/v/39c3-the-heartbreak-machine-nazis-in-the-echo-chamber - https://techcrunch.com/2026/01/05/hacktivist-deletes-white-supremacist-websites-live-on-stage-during-hacker-...

1. VVS Stealer Targeting Discord - https://unit42.paloaltonetworks.com/vvs-stealer/ - https://thehackernews.com/2026/01/new-vvs-stealer-malware-targets-discord.html - https://www.scworld.com/news/pyarmor-obfuscated-vvs-stealer-targets-discord-browser-data = https://www.infosecurity-magazine.com/news/vvs-stealer-advanced-obfuscation/ - https://socprime.com/active-threats/vvs-stealer-malware-targets...

India/X (Grok) • https://m.economictimes.com/tech/technology/meity-issues-notice-to-x-over-misuse-of-grok-to-create-obscene-content/articleshow/126308251.cms?from=mdr • https://m.economictimes.com/news/india/meity-issues-formal-notice-to-x-over-groks-it-act-lapses/articleshow/126307971.cms • https://www.ndtv.com/india-news/it-ministry-issues-notice-to-x-formerly-twitter-over-obscene-indecent-and-s...

Reddit permanently banned a 229,000-member ChatGPT jailbreak community after AI prompt injection attacks interfered with its automated systems. Meanwhile, a China-linked threat actor spied on over 2.2 million Zoom and Microsoft Teams meetings using malicious browser extensions. To top it off, the European Space Agency confirmed a breach exposing 200GB of source code and infrastructure secrets. Cyb...

• https://www.theverge.com/24343913/paypal-honey-megalag-coupon-scam-affiliate-fees • https://www.theverge.com/news/848870/honey-paypal-megalag-part-two • https://fortune.com/2024/12/23/honey-extension-scam-drama/ • https://www.newsweek.com/honey-coupon-browser-extension-mrbeast-youtube-influencer-2007484 • https://ppc.land/honey-co-founder-ryan-hudson-defends-extension-amid-fraud-detection-allega...