Iran-linked group Handala claimed it breached FBI drones and accessed months of surveillance footage while threatening World Cup teams with potential FPV drone attacks. Researchers disputed some of the evidence, and the claims remain unverified amid ongoing U.S.-Iran tensions.

The group added that first-person view drones are everywhere and "you never know when one might end up right in your team's bus."
One video presented as proof of the breach was actually produced in December 2024 by a software company promoting technology used by a U.S. police department to survey tornado damage.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Mathspace disclosed that attackers stole personal data belonging to 1,079,819 students, staff, and parents or guardians in Australia and New Zealand after breaching its Metabase system. The incident is the latest in a campaign exploiting a Metabase zero-day vulnerability used by multiple companies.
The FBI is investigating the dark web sale of scans from more than 153 million US and Canadian drivers licenses obtained via an ongoing breach at a Louisiana identity verification company. The incident underscores the lasting danger of stolen physical identity documents that cannot be reset like passwords and the growing scale of cyber-enabled identity theft.
ShinyHunters published data from 12.9 million genuine Carhartt accounts after the apparel company refused a $3.3 million ransom. The breach, which also exposed records for more than 15,000 employees, originated from Carhartt's Databricks analytics platform.
Sakura Internet disclosed that hackers accessed its sales management system on August 9, potentially compromising data from up to 1.36 million accounts. The breach, discovered during a separate Rental Server investigation, exposes personal and contract details but no confirmed exfiltration or credit card data.
ShinyHunters obtained and later leaked personal data belonging to 1.6 million RingCentral accounts after a July breach. The incident touched only a limited portion of the cloud communications provider’s customers and left core services untouched.