Major Incidents or Breaches

  • Grinex, a Kyrgyzstan-based cryptocurrency exchange sanctioned by the UK and US, has suspended operations following a $13.74 million hack. The exchange attributed the breach to Western intelligence agencies.
  • Major data breaches have been reported at a gym chain and a hotel giant. Specific details regarding the impacted organisations or data types were not disclosed.
  • Bluesky, a social media platform, experienced a disruptive distributed denial-of-service (DDoS) attack.

Newly Discovered Vulnerabilities

  • A critical remote code execution vulnerability has been disclosed in protobuf.js, a widely used JavaScript implementation of Google’s Protocol Buffers. Proof-of-concept exploit code is publicly available.

Notable Threat Actor Activity

  • Threat actors are increasingly reusing Tycoon 2FA phishing tools in other phishing kits after the disruption of the original Tycoon 2FA platform, indicating a shift in phishing kit development and distribution tactics.

Trends, Tools, or Tactics of Interest

  • In 2024, 68% of cloud breaches were attributed to compromised service accounts and unmanaged non-human identities, such as orphaned API keys, rather than traditional phishing or weak passwords.
  • A recent Microsoft Edge browser update introduced a bug that prevents right-click paste functionality in Microsoft Teams desktop client chats.
  • NAKIVO released Backup & Replication v11.2, which includes enhanced ransomware defense, faster replication, and expanded support for vSphere 9 and Proxmox VE 9.0.
  • The EU’s new age-verification app can reportedly be compromised in under two minutes, raising concerns about the robustness of digital identity verification tools.