Your DMV Records Are on the Dark Web 🪪 And Cisco's Front Door Is Wide Open 🚨

Two stories out of today's security news deserve your attention: one exposed the personal records of hundreds of thousands of drivers, and the other left a critical piece of corporate network security unlocked while attackers were already walking through it.

Hackers Dumped Florida's Driver Database After the State Refused to Pay

The extortion group ShinyHunters published hundreds of thousands of files stolen from DAVID, Florida's vehicle and driver database, after the state agency declined to pay a ransom. The leaked records include names, home addresses, vehicle buyer and seller details, and VINs — and some files go further, containing Social Security numbers, passports, and immigration documents.

Here's the part that should make every business uncomfortable: Florida's motor vehicle agency confirmed the attackers got in using police credentials that were stored on someone's personal device. Not a sophisticated zero-day. Not a nation-state exploit. Just a login sitting somewhere it never should have been. If your team accesses sensitive systems from personal phones or laptops, this is exactly the scenario you're one bad day away from.

For the people in that database, the damage is permanent. You can change a password; you cannot change your home address history or your Social Security number.

Read more →

Cisco's Maximum-Severity Zero-Day Is Already Being Exploited

Cisco has issued emergency updates for its Identity Services Engine (ISE), including a flaw rated at the highest possible severity. Think of ISE as the bouncer at the door of a corporate network — it decides which devices and users are allowed in. This bug lets an attacker skip the bouncer entirely by sending a specially crafted request to the management interface. No password required.

The critical detail: Cisco's own security team confirmed attackers are already using it in real attacks. This isn't a theoretical risk sitting in a researcher's lab; it's a live one. Organizations running ISE should treat patching as an emergency task, not a next-sprint item.

Even if you don't run Cisco gear, the lesson generalizes. The systems that control access to everything else are the highest-value targets on your network, and they need the fastest patch cycles you can manage.

Read more →

Stay ahead of threats with GOCO Security at gocosecurity.com.