🚨 ALERT: Grindr to pay £26 million to settle UK privacy lawsuit over HIV data sharing

The LGBTQ+ dating app Grindr has agreed to a £26 million ($35.1 million) settlement in the U.K. to resolve claims that it mishandled sensitive user information. The lawsuit, filed in April 2024, alleged the platform violated privacy laws by sharing personal data with third parties for commercial advertising purposes.

The core of the legal action centered on the unauthorized sharing of highly sensitive details, including users' HIV statuses. While the settlement concludes the legal dispute, it follows significant scrutiny regarding how the app manages protected health information within its ecosystem.

A massive price tag for the mishandling of the most sensitive data imaginable.

@edited

🚨 ALERT: Malware 'copy and paste' attack persists despite major cleanup efforts

CrowdStrike reports that while a major disruption on August 31 successfully blocked hackers from delivering new malware payloads, a significant threat remains. Existing infections are still capable of executing a 'copy and paste' attack, where the malware automatically swaps legitimate cryptocurrency payment addresses for those controlled by attackers.

This tactic targets users during the transaction process, making it difficult to detect once the address is pasted into a wallet. Even though the primary delivery mechanism has been severed, the dormant malware already residing on infected devices continues to pose a direct risk to funds.

The cleanup stopped the spread, but it didn't clear the infection. ⚠️

@edited

💰 BIG MONEY: Circle to acquire cross-border payments firm Tazapay for $400 million

Circle has reached an agreement to purchase Tazapay, a specialist in cross-border payment infrastructure, in a deal valued at $400 million. The acquisition aims to integrate Tazapay’s payment capabilities with Circle's existing stablecoin ecosystem.

According to CoinDesk, the move is designed to streamline international transactions and expand Circle's reach into global payment rails. The deal signals a continued push to bridge traditional finance with digital asset settlement.

Is this the beginning of the end for traditional wire transfers?

@edited

🚨 ALERT: Autonomous AI agents harvest thousands of credentials in six-hour blitz

A financially motivated hacking group has deployed an autonomous, multi-agent framework to execute large-scale credential harvesting. According to Google Threat Intelligence Group (GTIG), the automated attack framework successfully compromised thousands of credentials in less than six hours.

The campaign demonstrates a significant shift in how threat actors leverage artificial intelligence to streamline complex operations. GTIG reports that attackers with varying motivations are now actively targeting proprietary AI systems to scale their reach.

The era of human-speed hacking is officially over.

@edited

💰 BIG MONEY: Bitmine acquires 28,000 ETH, nearing 5% supply accumulation goal

Bitmine has purchased an additional 28,000 ETH, bringing its treasury accumulation to 97% of its target to control 5% of the total Ether supply. The move marks a significant milestone in the firm's aggressive acquisition strategy.

Despite the successful accumulation, Tom Lee’s team is currently navigating a $5.1 billion unrealized loss on its primary treasury asset. The massive scale of the position highlights the high-stakes nature of their market exposure.

Can the firm recover the deficit before the accumulation goal is fully met?

@edited

🚨 ALERT: BengalSEO campaign poisons Bing results to spread malware and scams

Researchers have uncovered a long-running SEO poisoning operation codenamed BengalSEO. Operating out of Rajasthan, India, since at least 2015, the campaign uses manipulated search results on Bing to redirect users toward tech support scams and the deployment of MayaBot malware.

According to the DFIR Report, the scheme is driven by two IT service providers identified as WeConnect. The attackers exploit search engine optimization vulnerabilities to ensure their malicious links appear high in search rankings, targeting unsuspecting users looking for legitimate services.

A decade-long operation hiding in plain sight via search results.

@edited

🚨 ALERT: North Korean hackers embed backdoor directly into HAProxy source code

Security researchers at Rapid7 have identified North Korean-linked actors embedding a backdoor within the source code of HAProxy. The malware was discovered running at the network edge of two South Korean companies, allowing attackers to mask command-and-control traffic while the load balancer continued to function normally.

By integrating the malicious code into the software itself, the threat actors successfully bypassed traditional detection methods. The backdoor enabled data theft and unauthorized access without disrupting the legitimate network traffic handled by the load balancer.

When the infrastructure itself is compromised, how do you verify your edge?

@edited

🔥 WILD: OpenAI's GPT-6 Astra reaches 'critical' cybersecurity capability level

OpenAI has confirmed that its new GPT-6 Astra model has achieved a 'Critical level' of cybersecurity proficiency. According to BleepingComputer, the model is capable of identifying zero-day vulnerabilities, marking a significant leap in AI-driven offensive and defensive capabilities.

The deployment comes with a warning from the developer: the model's advanced reasoning makes it significantly harder to monitor and control than previous iterations. This creates a dual-edged reality where the AI can patch flaws faster but may also be used to discover them more effectively.

Can safety protocols keep pace with autonomous zero-day discovery? 🛡️

@edited

💰 BIG MONEY: Hackers seize $320M in Bitcoin from Liquid Network before returning most funds

A major security breach at Liquid Network resulted in the theft of $320 million worth of Bitcoin. The incident targeted the sidechain protocol, causing immediate liquidity concerns across the ecosystem.

Following the exploit, developers deployed a critical patch to secure the network. According to reports, the majority of the stolen assets have since been returned to their original addresses.

A massive heist neutralized by a rapid patch, but the vulnerability remains a warning.

@edited

⚠️ UPDATE: Morpho launches fixed-rate Midnight markets on Ethereum

Morpho has expanded its fixed-rate Midnight markets to the Ethereum network, introducing new USDC markets backed by WBTC and cbBTC. The expansion aims to provide more predictable yield options for users within the Morpho ecosystem.

Despite the rollout, approximately $5 billion currently held in Morpho Vaults is unable to participate in Midnight. This liquidity remains sidelined pending a decision from the DAO.

Will the DAO move fast enough to unlock that $5 billion?

@edited

🚨 ALERT: ShinyHunters claims breach of Florida DMV database

The extortion group ShinyHunters has claimed responsibility for breaching Florida's 'DAVID' database, an online platform used by the Department of Motor Vehicles. According to reports from BleepingComputer, the hackers allege they successfully exfiltrated over 200,000 driver records.

The stolen data reportedly contains sensitive information regarding motorists across the state. While the group has made these claims, official confirmation regarding the scope of the breach and the integrity of the DAVID system is still pending.

A massive leak of state-held driver data is a major privacy failure.

@edited