CyberSIXT Search
Original
Image: SecurityWeek

SecurityWeekSecurityWeek News

In Other News: HashJack AI Browser Attack, Charming Kitten Leak, Hacker Unmasked

Part of the Scattered Spider story · 58 articles · 11 outlets · since 28 Aug 2025

SecurityWeek's cybersecurity news roundup highlights key stories in the field, including:

1. **TfL Cyberattack**: Two suspected members of the Scattered Spider group, Thalha Jubair and Owen Flowers, pleaded not guilty to charges related to a cyberattack on Transport for London.

2. **HashJack Attack**: A new indirect prompt injection attack targeting AI browser assistants was disclosed, potentially leading to phishing and data exfiltration.

3. **Charming Kitten Leak**: Internal documents from the Iranian APT Charming Kitten were leaked, revealing their structured cyber operations.

4. **Scattered Lapsus$ Hunters**: The identity of a key member, a 16-year-old from Jordan, was uncovered, claiming to retire while cooperating with law enforcement.

5. **TP-Link vs. Netgear**: TP-Link filed a lawsuit against Netgear for defamatory claims regarding ties to the Chinese government.

6. **Comcast Data Breach**: Comcast agreed to a $1.5 million fine over a data breach affecting 238,000 customers.

7. **Firefox Vulnerability**: A high-severity vulnerability in Firefox's WebAssembly engine was reported and patched.

8. **Gainsight Incident**: Gainsight downplayed the impact of a data breach affecting Salesforce integrations, claiming only a handful of customers were affected.

9. **ShadowV2 Botnet**: An IoT botnet was active during a recent AWS outage, indicating potential future attacks.

10. **Bloody Wolf APT**: This group expanded its operations in Central Asia, impersonating government agencies in attacks.

Story timeline Scattered Spider

Full timeline
Show as table
Scattered Spider coverage
Published (UTC)OutletHeadline
Fri 28 Nov 2025 · 10:50 UTCSecurityWeekIn Other News: HashJack AI Browser Attack, Charming Kitten Leak, Hacker Unmasked (this article)
Fri 26 Jun · 15:00 UTCSecurityWeekWeekly Security Roundup: Cellebrite, Tata Hack, AI Warnings
Wed 1 Jul · 20:12 UTCThe Hacker News19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
Thu 2 Jul · 03:02 UTCSecurityOnlineTeen dual citizen extradited for Scattered Spider cyber extortion
Thu 2 Jul · 08:11 UTCSecurity AffairsTeen Peter Stokes Extradited to US Over $8m Jewelry Heist
Thu 2 Jul · 09:21 UTCInfosecurityUS extradites teen hacker linked to $100M Scattered Spider scheme
Fri 3 Jul · 09:51 UTCSecurityWeekUS extradites alleged Scattered Spider teen over jewelry heist
Mon 6 Jul · 17:42 UTCSecurityOnlineUS extradites hacker after Microsoft GDID tracks him despite VPN
Tue 7 Jul · 14:00 UTCThe Hacker NewsFBI tracks alleged Scattered Spider via Windows Device ID
Tue 7 Jul · 14:32 UTCInfosecurityScattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang
Thu 16 Jul · 12:20 UTCInfosecurityTeen hackers jailed for Transport for London cyberattack
Thu 16 Jul · 13:25 UTCSecurityWeekScattered Spider pair jailed five years for £29m TfL hack
Thu 16 Jul · 18:40 UTCThe Hacker NewsScattered Spider duo jailed 5.5 years for £29m TfL cyberattack
Thu 16 Jul · 18:40 UTCSecurity AffairsScattered Spider duo sentenced 5.5 years for £29m TfL cyberattack
Tue 22 Sep · 13:30 UTCDataBreachesTexas Man Admits Role in Scattered Spider Extortion Scheme

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device