hacking Archives

A hacker who breached multiple U.S. government systems repeatedly posted sensitive personal data on his Instagram account, according to newly unsealed court documents. The defendant, identified as 24‑year‑old Nicholas Moore of Springfield, Tennessee, pleaded guilty to hacking the Supreme Court’s electronic filing system and other government networks.

Court filings reveal Moore accessed the Supreme Court’s secure electronic filing platform at least 25 times using stolen credentials belonging to authorized users. On his Instagram account, @ihackthegovernment, Moore published personal information of a victim tied to the Supreme Court system, including the person’s name and historical filing records.

The breach extended beyond the judicial system. Moore also infiltrated AmeriCorps’ internal servers and the Department of Veterans Affairs’ MyHealtheVet portal, again using stolen login information. He posted detailed personal data on the social platform, including names, dates of birth, email addresses, physical addresses, phone numbers, veteran status, service history, partial Social Security numbers, and even identifiable health information like prescribed medications.

Prosecutors charged Moore with a single count of fraudulent activity involving computers, a Class A misdemeanor that carries a potential maximum sentence of one year in prison and a $100,000 fine. The federal case is scheduled for sentencing in April 2026.

Security experts say this incident highlights how rampant credential theft and inadequate access controls can expose even highly sensitive government systems to public data leaks. Posting stolen information to a widely accessible social platform turns a cybersecurity breach into a widespread privacy disaster with long‑lasting consequences for victims.

PornHub Extorted After Historical Premium User Data Leaked

ICE Expands Cybersecurity Contract to Intensify Employee Surveillance

Airbus Moves Critical Workloads to European Sovereign Cloud Amid Security Concerns

For cybersecurity insights, threat analysis, and breach impact reports

Email inquiries to hello@laterstack.com

This week, both Apple and Google released urgent security updates after discovering active zero-day vulnerabilities that targeted an unknown number of users. The incidents highlight how even the largest tech companies remain vulnerable to sophisticated attacks, often originating from government-backed actors.

On Wednesday, Google patched several security flaws in its Chrome browser. One of the vulnerabilities was actively exploited before the company could release a fix, a scenario that is increasingly common in high-profile hacking campaigns. Initially, Google provided limited details, but later updates confirmed the discovery came from Apple’s security engineering team and Google’s Threat Analysis Group. These teams focus on tracking government hackers and mercenary spyware operators, suggesting that this campaign may have been coordinated at the state level.

Apple simultaneously issued updates for its iPhones, iPads, Macs, Apple Watches, Apple TV, Vision Pro, and Safari browser. According to Apple’s advisory, two zero-day flaws were patched on iOS devices. The company acknowledged that these vulnerabilities had likely been used in “extremely sophisticated attacks against specific targeted individuals” before iOS 26 was released.

Zero-day vulnerabilities are particularly dangerous because they are unknown to the software makers at the time of exploitation. Historically, such flaws have been used by government actors and companies like NSO Group and Paragon Solutions to deploy spyware against journalists, activists, and dissidents. These attacks often go unnoticed until security researchers or the companies themselves discover them.

The public disclosure raises broader questions about digital safety, personal data protection, and the role of private companies in defending users against state-level hacking. While patches prevent future exploitation, the affected users may have already been compromised, emphasizing the importance of layered cybersecurity practices such as frequent updates, strong passwords, and multifactor authentication.

Apple and Google have not commented beyond their advisories, leaving the scale of the attacks and the number of affected users unclear. For consumers, the incident serves as a reminder that vigilance is critical even with devices from some of the most secure technology providers in the world.

Protective Measures for Users:

Update devices and applications immediately after security patches are released

Enable multifactor authentication wherever possible

Monitor accounts for suspicious activity and unusual logins

Use strong, unique passwords and consider password managers for security

Related Laterstack Cybersecurity Stories

Exposed AI Image Database Raises Serious Privacy and Security Concerns

Credit Check Company 700Credit Exposes Personal Data of Over 5 Million Americans

Home Depot Exposed Internal Systems for a Year After Employee Leaked GitHub Token

For inquiries, tips, or submissions: hello@laterstack.com