SecurityWeekSecurityWeek News
In Other News: HashJack AI Browser Attack, Charming Kitten Leak, Hacker Unmasked
SecurityWeek's cybersecurity news roundup highlights key stories in the field, including:
1. **TfL Cyberattack**: Two suspected members of the Scattered Spider group, Thalha Jubair and Owen Flowers, pleaded not guilty to charges related to a cyberattack on Transport for London.
2. **HashJack Attack**: A new indirect prompt injection attack targeting AI browser assistants was disclosed, potentially leading to phishing and data exfiltration.
3. **Charming Kitten Leak**: Internal documents from the Iranian APT Charming Kitten were leaked, revealing their structured cyber operations.
4. **Scattered Lapsus$ Hunters**: The identity of a key member, a 16-year-old from Jordan, was uncovered, claiming to retire while cooperating with law enforcement.
5. **TP-Link vs. Netgear**: TP-Link filed a lawsuit against Netgear for defamatory claims regarding ties to the Chinese government.
6. **Comcast Data Breach**: Comcast agreed to a $1.5 million fine over a data breach affecting 238,000 customers.
7. **Firefox Vulnerability**: A high-severity vulnerability in Firefox's WebAssembly engine was reported and patched.
8. **Gainsight Incident**: Gainsight downplayed the impact of a data breach affecting Salesforce integrations, claiming only a handful of customers were affected.
9. **ShadowV2 Botnet**: An IoT botnet was active during a recent AWS outage, indicating potential future attacks.
10. **Bloody Wolf APT**: This group expanded its operations in Central Asia, impersonating government agencies in attacks.