The latest threat landscape reports highlight significant data breaches affecting identity verification services, educational platforms, and financial institutions. IDScan.net and Mathspace suffered major exposures, with the latter involving a Metabase vulnerability. Meanwhile, Revolut was targeted through fraudulent government email requests, and Florida’s DMV experienced a breach via stolen law enforcement credentials. These incidents underscore the persistent risks of credential theft and social engineering.
Technological advancements have also introduced new attack vectors, particularly in AI and critical software. Research into 'PuzzleMask' and ChatGPT's code execution environment revealed novel prompt injection and data leakage techniques. On the patching front, Microsoft addressed a record-breaking 974 vulnerabilities, including two zero-days, while GitLab and MikroTik fixed critical flaws that could lead to full system compromise. Additionally, mobile banking fraud continues to evolve with the discovery of the GoldFactory group's Android application cloning techniques.
Top comments (0)