⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

The weekly recap highlights a TEE[.]Fail side-channel attack that can extract secrets from Intel and AMD DDR5 secure enclaves, bypassing protections in Intel SGX/TDX and AMD SEV-SNP, and notes the attack requires physical access and root-level privileges. It also covers North Korea‑affiliated BlueNoroff resurfacing with two campaigns dubbed GhostCall and GhostHire, targeting executives and Web3 developers via social platforms, with BlueNoroff described as a Lazarus Group sub‑cluster in the report.

In other top news, MITRE releases ATT&CK v18, updating detections with new objects for detection strategies and analytics across mobile and ICS fronts. The round‑up also notes 12 malicious Visual Studio Code extensions flagged for data theft or backdoor capability, linked to the GlassWorm campaign’s activity. Proton releases Data Breach Observatory, reporting over 306.1 million records leaked from 794 breaches across sectors, with SMBs comprising a large share of the breaches.