Major Incidents or Breaches

  • SafePal, a cryptocurrency hardware wallet provider, disclosed a data breach affecting approximately 39,798 customers after a vulnerability was exploited to steal customer order information. The stolen data is now reportedly being offered for sale by a threat actor [1].
  • A threat actor claims to have exfiltrated millions of records from major organisations including McDonald’s, TCS, and Vodafone as part of an Azure data theft campaign targeting Fortune 500 companies [7].

Newly Discovered Vulnerabilities

  • Wireshark version 4.6.8 was released, addressing 28 vulnerabilities and 25 bugs [6].

Notable Threat Actor Activity

  • Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service, resulting in significant disruption to communications earlier this week [3].
  • A new macOS malware strain, AmnesiaStealer, has been identified. It targets users via ClickFix attacks and includes a streaming module enabling attackers to hijack and remotely control victims’ browser sessions [4].

Sources#

  1. SafePal data breach impacts 39,798 customers, stolen info for sale - bleepingcomputer.com
  2. Fortune 500 Companies Hit in Azure Data Theft Campaign - securityweek.com
  3. Wireshark 4.6.8 Released, (Sun, Aug 16th) - isc.sans.edu
  4. Large-scale DDoS attacks disrupted Threema secure messaging service - bleepingcomputer.com
  5. New AmnesiaStealer macOS malware hijacks browser sessions via remote control - bleepingcomputer.com