ReliaQuest Rejects Compromise Claims After ShinyHunters Incident
ReliaQuest has responded to compromise claims following a social engineering attack attributed to ShinyHunters, asserting that the threat actor did not successfully breach its systems. The company has provided details about the attack method while refuting reports suggesting a full compromise occurred.
ReliaQuest confirmed that one of its employees fell victim to a social engineering attack that provided attackers with a password and temporary access to the company's identity system. Extortion group ShinyHunters subsequently posted screenshots on its leak site, claiming responsibility and taunting the cybersecurity firm over the breach. The incident followed an earlier exchange between ShinyHunters and ReliaQuest's threat research team on social media.
ReliaQuest has confirmed that threat actor ShinyHunters exploited a phishing attack against an employee to gain access to a dashboard within the company's systems. The company claims that the scope of the breach was limited, though the specific data accessed or exposed was not detailed in the report.
Take-Two's investigation into the GTA 6 leak is forcing Discord to disclose sensitive user data including IP addresses, phone numbers, and device IDs in an effort to identify the source of the leaked footage. This legal action could potentially expose personal information belonging to thousands of Discord users caught up in the investigation, raising privacy concerns even for users not directly involved in the leak.
Truffle Security has launched TruffleHog AWS Analyze, a new feature for TruffleHog Enterprise that enriches discovered AWS credentials with permission and access level details to help security teams quickly assess risk and prioritize response. This addition extends TruffleHog's existing capability of finding and verifying leaked credentials across 800+ secret types by providing identity and access context specifically for AWS environments, building on similar functionality already available for SaaS platforms and Google Cloud.