Drive-by data theft.

CyberWire Daily provides a news roundup covering multiple active cybersecurity incidents: a marketplace (Nexus) selling scans of driver’s licenses, OpenAI model security developments, the takedown of the long-running Sality botnet, increasing abuse of AI hallucinations for domain squatting, published exploits and urgent patches for Cleo Harmony and Virtualizor (including a malicious Virtualizor update distributed via BGP hijacking), a Texas healthcare data breach, and a charge against a Russian national accused of infecting ~80,000 freelancers with remote-access malware.