Mega breaches lead us to India, where boAt, a consumer electronics company suffered the leak of 7.5 million customer records, and to France, where SurveyLama, an online platform that rewards registered users for completing surveys, suffered a breach that exposed the sensitive data of 4.4 million users.

At least in this fortnight, no fintech platform suffered major losses by threat actors, however the sector continued to be plagued by campaigns aiming to steal cryptocurrencies by mean of scams or crypto drainers.

In terms of Cyber Espionage, political parties in Germany continued to be under the welcome attentions of threat actors ahead of the general elections in the European Union. Other threat actors particularly active in this period included: Wicked Panda, MuddyWater, Konni, BlackTech, and Volt Typhoon, the latter very busy in exploiting multiple Ivanti vulnerabilities.

In terms of Hacktivism and Cyber Warfare, the pro-Ukrainian collective Blackjack was particularly active against targets in Russia, including the utilization of a destructive malware dubbed Fuxnet. Other interesting events included China-linked influence operations using generative artificial intelligence to amplify controversial domestic issues in places like the U.S. and Taiwan.

For the details, feel free to browse the timeline, and obviously share it to support my work in spreading the risk awareness across the community. And don’t forget to follow @paulsparrows on X (formerly Twitter,) or even connect on Linkedin, or Mastodon for the latest updates.