<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Threema on DanSec Daily</title><link>https://blog.dansec.red/vendors/threema/</link><description>Recent content in Threema on DanSec Daily</description><generator>Hugo</generator><language>en-gb</language><lastBuildDate>Mon, 17 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://blog.dansec.red/vendors/threema/rss.xml" rel="self" type="application/rss+xml"/><item><title>Cybersecurity Brief – 2026-08-17</title><link>https://blog.dansec.red/posts/2026-08-17-cybersecurity-news/</link><pubDate>Mon, 17 Aug 2026 00:00:00 +0000</pubDate><guid>https://blog.dansec.red/posts/2026-08-17-cybersecurity-news/</guid><description>&lt;h2 id="major-incidents-or-breaches"&gt;Major Incidents or Breaches&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;SafePal, a cryptocurrency hardware wallet provider, disclosed a data breach affecting approximately 39,798 customers after a vulnerability was exploited to steal customer order information. The stolen data is now reportedly being offered for sale by a threat actor &lt;sup class="citation"&gt;&lt;a href="https://www.bleepingcomputer.com/news/security/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale/" title="SafePal data breach impacts 39,798 customers, stolen info for sale - bleepingcomputer.com" target="_blank" rel="noopener"&gt;[1]&lt;/a&gt;&lt;/sup&gt;.&lt;/li&gt;&#10;&lt;li&gt;A threat actor claims to have exfiltrated millions of records from major organisations including McDonald’s, TCS, and Vodafone as part of an Azure data theft campaign targeting Fortune 500 companies &lt;sup class="citation"&gt;&lt;a href="https://www.securityweek.com/fortune-500-companies-hit-in-azure-data-theft-campaign/" title="Fortune 500 Companies Hit in Azure Data Theft Campaign - securityweek.com" target="_blank" rel="noopener"&gt;[7]&lt;/a&gt;&lt;/sup&gt;.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;h2 id="newly-discovered-vulnerabilities"&gt;Newly Discovered Vulnerabilities&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Wireshark version 4.6.8 was released, addressing 28 vulnerabilities and 25 bugs &lt;sup class="citation"&gt;&lt;a href="https://isc.sans.edu/diary/rss/33248" title="Wireshark 4.6.8 Released, (Sun, Aug 16th) - isc.sans.edu" target="_blank" rel="noopener"&gt;[6]&lt;/a&gt;&lt;/sup&gt;.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;h2 id="notable-threat-actor-activity"&gt;Notable Threat Actor Activity&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service, resulting in significant disruption to communications earlier this week &lt;sup class="citation"&gt;&lt;a href="https://www.bleepingcomputer.com/news/security/large-scale-ddos-attacks-disrupted-threema-secure-messaging-service/" title="Large-scale DDoS attacks disrupted Threema secure messaging service - bleepingcomputer.com" target="_blank" rel="noopener"&gt;[3]&lt;/a&gt;&lt;/sup&gt;.&lt;/li&gt;&#10;&lt;li&gt;A new macOS malware strain, AmnesiaStealer, has been identified. It targets users via ClickFix attacks and includes a streaming module enabling attackers to hijack and remotely control victims&amp;rsquo; browser sessions &lt;sup class="citation"&gt;&lt;a href="https://www.bleepingcomputer.com/news/security/new-amnesiastealer-macos-malware-hijacks-browser-sessions-via-remote-control/" title="New AmnesiaStealer macOS malware hijacks browser sessions via remote control - bleepingcomputer.com" target="_blank" rel="noopener"&gt;[4]&lt;/a&gt;&lt;/sup&gt;.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;hr&gt;&#10;&lt;h3 id="sources"&gt;Sources&lt;/h3&gt;&#10;&lt;ol class="sources"&gt;&#10; &lt;li id="src-1"&gt;&lt;a href="https://www.bleepingcomputer.com/news/security/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale/" title="SafePal data breach impacts 39,798 customers, stolen info for sale - bleepingcomputer.com" target="_blank" rel="noopener"&gt;SafePal data breach impacts 39,798 customers, stolen info for sale&lt;/a&gt; &lt;span class="source-host"&gt;- bleepingcomputer.com&lt;/span&gt;&lt;/li&gt;&#10; &lt;li id="src-7"&gt;&lt;a href="https://www.securityweek.com/fortune-500-companies-hit-in-azure-data-theft-campaign/" title="Fortune 500 Companies Hit in Azure Data Theft Campaign - securityweek.com" target="_blank" rel="noopener"&gt;Fortune 500 Companies Hit in Azure Data Theft Campaign&lt;/a&gt; &lt;span class="source-host"&gt;- securityweek.com&lt;/span&gt;&lt;/li&gt;&#10; &lt;li id="src-6"&gt;&lt;a href="https://isc.sans.edu/diary/rss/33248" title="Wireshark 4.6.8 Released, (Sun, Aug 16th) - isc.sans.edu" target="_blank" rel="noopener"&gt;Wireshark 4.6.8 Released, (Sun, Aug 16th)&lt;/a&gt; &lt;span class="source-host"&gt;- isc.sans.edu&lt;/span&gt;&lt;/li&gt;&#10; &lt;li id="src-3"&gt;&lt;a href="https://www.bleepingcomputer.com/news/security/large-scale-ddos-attacks-disrupted-threema-secure-messaging-service/" title="Large-scale DDoS attacks disrupted Threema secure messaging service - bleepingcomputer.com" target="_blank" rel="noopener"&gt;Large-scale DDoS attacks disrupted Threema secure messaging service&lt;/a&gt; &lt;span class="source-host"&gt;- bleepingcomputer.com&lt;/span&gt;&lt;/li&gt;&#10; &lt;li id="src-4"&gt;&lt;a href="https://www.bleepingcomputer.com/news/security/new-amnesiastealer-macos-malware-hijacks-browser-sessions-via-remote-control/" title="New AmnesiaStealer macOS malware hijacks browser sessions via remote control - bleepingcomputer.com" target="_blank" rel="noopener"&gt;New AmnesiaStealer macOS malware hijacks browser sessions via remote control&lt;/a&gt; &lt;span class="source-host"&gt;- bleepingcomputer.com&lt;/span&gt;&lt;/li&gt;&#10;&lt;/ol&gt;</description></item></channel></rss>