Daily Recap, Authorities dismantled a crypto scam spree linked to a $240 million Bitcoin theft after suspects spent the stolen funds, while MikroTik patched critical RouterOS flaws used for unauthenticated device hijacking. The week also saw major breach disclosures (including Mathspace, a Vietnam-linked API leak of ~220 million traveler records, and a Berlin city-agency credential leak), plus ongoing identity and backdoor activity such as help-desk social-engineering targeting Microsoft 365 and the StyleSmuggler zero-day dropping a Linux backdoor.
#Bitcoin #RouterOS #MikroTik #Mathspace #Microsoft365 #StyleSmuggler #Linux #BigBear #MFA #Chrome #Edge #PEEP #Chrome #Edge #Berlin #Vietnam #API #Microsoft
#Bitcoin #RouterOS #MikroTik #Mathspace #Microsoft365 #StyleSmuggler #Linux #BigBear #MFA #Chrome #Edge #PEEP #Chrome #Edge #Berlin #Vietnam #API #Microsoft
Crypto Crime
- Authorities dismantled a scam spree tied to a $240 million Bitcoin theft after suspects flaunted the stolen funds. – Crypto Theft
Router Exploits
- MikroTik fixed critical RouterOS flaws that were being chained for unauthenticated device hijacking. – Router Fix, Router Hijack
- A broader weekly roundup highlighted a Chrome 0-day, router hijacks, and a coder supply-chain attack among the week’s top threats. – Weekly Recap
Data Breaches
- Mathspace disclosed a breach exposing data on over 1 million people, with the incident also reported as affecting more than 1 million users. – Mathspace Breach, Mathspace Leak
- A Vietnam-linked API leak exposed about 220 million traveler records, underscoring the scale of compromised transport data. – Travel Leak
- Berlin is investigating a new data leak after hackers published stolen login credentials from city agencies. – Berlin Breach
Identity Abuse
- Attackers used fake IT help-desk calls to steal Microsoft 365 data and extort executives in a targeted social-engineering campaign. – Help-Desk Scam
- BigBear said its phishing service bypassed MFA at 258 organizations, showing how phishing kits continue to defeat account protections. – BigBear Phish
Malware & Backdoors
- Magento StyleSmuggler zero-day exploitation is being used to deploy a Linux backdoor on compromised systems. – StyleSmuggler
- PEEP turns Chrome and Edge into post-compromise backdoors for host command execution. – PEEP Backdoor
- OpenAI Agents were reported hijacking another victim website in a post-compromise abuse case. – Agent Hijack
AI & Security Tools
- Microsoft unveiled Project Zenith, bringing large AI models directly onto developer PCs in Windows 11. – Project Zenith
- Doppler showcased secrets management for humans, pipelines, and AI agents to reduce credential exposure. – Doppler Secrets
Ransomware Trends
- Ransomware negotiations have matured into a business process, reflecting how extortion playbooks are becoming more structured and professionalized. – Ransomware Talks