Major Incidents or Breaches

  • Levi Strauss experienced a cyberattack in which a threat actor used social engineering to gain access to the computers of three employees and exfiltrated corporate data [4].

Newly Discovered Vulnerabilities

  • Critical vulnerabilities were discovered in Belgian eID software, which is used by eight of Belgium’s ten largest banks and more than 60 government agencies, potentially impacting over 2 million people [5].

Notable Threat Actor Activity

  • A malicious Visual Studio Code extension named Solidity Pro (“solidity-pro”) was identified as stealing crypto wallets, API keys, and credentials from developers, targeting users in the cryptocurrency and blockchain development sector [1].

Trends, Tools, or Tactics of Interest

  • OpenAI paused some internal activities related to its upcoming AI model Astra after internal evaluation showed significant advancement in its cyber capabilities, raising concerns about potential misuse [2].

Sources#

  1. Corporate Data Stolen in Levi Strauss Cyberattack - securityweek.com
  2. Critical Flaws Discovered in Belgian eID Software Used by 2 Million People - securityweek.com
  3. Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials - thehackernews.com
  4. OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause - thehackernews.com