Scattered Lapsus$ Hunters Demand Google Fire Security Experts or Face Data Leak
Source: https://hackread.com/scattered-lapsus-hunters-google-fire-experts-data-leak/
Proofpoint researchers have observed an increase in cybercriminals using Stealerium-based malware, an open-source infostealer available on GitHub. Multiple stealers share code with Stealerium, including Phantom Stealer. Campaigns delivering Stealerium have used various lures and file types, targeting industries like hospitality, education, and finance. The malware can exfiltrate a wide range of data, including browser credentials, credit card info, and crypto wallet data. It uses anti-analysis techniques and can exfiltrate data through multiple channels like SMTP, Discord, and Telegram. The rise in Stealerium usage reflects the growing trend of threat actors pivoting to information stealers as identity theft becomes a priority.
Disney to pay $10M to settle claims it collected kids’ data on YouTube
Source: https://www.bleepingcomputer.com/news/security/disney-to-pay-10m-to-settle-claims-it-collected-kids-data-on-youtube/
Hackers Grab $130M Using Brazil's Real-Time Payment System
Source: https://www.databreachtoday.co.uk/hackers-grab-130m-using-brazils-real-time-payment-system-a-29352
In June 2025, Google's Salesforce instance was breached by UNC6040 & UNC6240 using vishing, OAuth app abuse, and anonymity layers. The attackers stole business data of small and medium-sized clients. A parallel attack by UNC6395 compromised Salesloft Drift's Salesforce integration, affecting hundreds of customers. Both incidents involved sophisticated social engineering, OAuth token abuse, and data exfiltration via TOR. The attacks are linked to the ShinyHunters group and share similarities with other high-profile breaches targeting various industries. The incidents highlight vulnerabilities in SaaS environments and the need for improved security measures, including OAuth governance, identity management, and proactive monitoring.
Cloudflare Confirms Data Breach Linked to Salesforce and Salesloft Drift
Source: https://hackread.com/cloudflare-data-breach-salesforce-and-salesloft-drift/
Palo Alto Networks, Zscaler and PagerDuty Hit in Salesforce Linked Data Breaches
Source: https://hackread.com/palo-alto-networks-zscaler-pagerduty-salesforce-data-breach/
TamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies
Source: https://thehackernews.com/2025/08/tamperedchef-malware-disguised-as-fake.html
Healthcare Services Group data breach impacts 624,000 people
Source: https://www.bleepingcomputer.com/news/security/healthcare-services-group-data-breach-impacts-624-000-people/
An interesting approach to malware by checking for Claude Code CLI and Gemini CLI in compromised \`nx\` package to explore local filesystem and steal credentials, api keys, wallets, etc.
Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data
Source: https://thehackernews.com/2025/08/salesloft-oauth-breach-via-drift-ai.html
DaVita confirms ransomware attack compromised data of 2.7M people
Source: https://securityaffairs.com/181458/data-breach/kidney-dialysis-firm-davita-confirms-ransomware-attack-compromised-data-of-2-7m-people.html
