Take-Two's investigation into the GTA 6 leak is forcing Discord to disclose sensitive user data including IP addresses, phone numbers, and device IDs in an effort to identify the source of the leaked footage. This legal action could potentially expose personal information belonging to thousands of Discord users caught up in the investigation, raising privacy concerns even for users not directly involved in the leak.
Read full article at Malwarebytes Labs ↗ReliaQuest has responded to compromise claims following a social engineering attack attributed to ShinyHunters, asserting that the threat actor did not successfully breach its systems. The company has provided details about the attack method while refuting reports suggesting a full compromise occurred.
Truffle Security has launched TruffleHog AWS Analyze, a new feature for TruffleHog Enterprise that enriches discovered AWS credentials with permission and access level details to help security teams quickly assess risk and prioritize response. This addition extends TruffleHog's existing capability of finding and verifying leaked credentials across 800+ secret types by providing identity and access context specifically for AWS environments, building on similar functionality already available for SaaS platforms and Google Cloud.
ReliaQuest has confirmed that threat actor ShinyHunters exploited a phishing attack against an employee to gain access to a dashboard within the company's systems. The company claims that the scope of the breach was limited, though the specific data accessed or exposed was not detailed in the report.
Latvia's Road Traffic Safety Directorate (CSDD) suffered a significant breach exposing payment records for over 1.2 million individuals—approximately two-thirds of the country's population—alongside data from 200,000 organizations. Check Point Research's latest threat intelligence bulletin documents this incident alongside other notable cyber discoveries and attacks from the week of August 24th.