This day 02:02 06:02 10:02 14:03 18:03 22:04
Info  2026-08-17 02:02Z · last 4h · 2 findings · glm-5.2:cloud

Threat Brief — 2026-08-17 — Crypto Wallet Breach, AI Outage

Executive summary: SafePal, a cryptocurrency hardware wallet provider, disclosed a data breach affecting nearly 40,000 customers after an exploitation of a flaw exposed order information now offered for sale by a threat actor. Separately, Anthropic confirmed a major outage taking Claude offline across multiple services — a reminder that AI-platform availability is now operationally critical for many engineering teams.

Top items

Themes

Crypto-adjacent supply chain targeting continues. The SafePal breach follows a pattern seen earlier this fortnight (Trezor customer-data breach via ShipMonk, Coinsbuy $8M heist) where attackers target the customer-data perimeter around crypto companies rather than the wallets themselves. The goal is likely credential phishing and social engineering rather than direct key theft.

AI-platform reliability is now a security concern. The Claude outage arrives alongside last week's story of Claude making an autonomous HR firing decision — reinforcing that AI services are deeply embedded in operational workflows, making their availability and failure modes a first-order risk for engineering organisations.

Public exploits · latest from the exploit feed

[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE 2026-10-01 15:15Z · RSS:exploit-db [webapps] Food-Ordering 1.0 - LFI 2026-10-01 15:15Z · RSS:exploit-db [webapps] WordPress 7.0.2 - Path Travesal 2026-10-01 15:15Z · RSS:exploit-db [webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write 2026-10-01 15:15Z · RSS:exploit-db [remote] Teltonika_RutOS 00.07.06.21 - command injection 2026-10-01 15:15Z · RSS:exploit-db [webapps] POMS oretnom23v1.0 - SQLi vulnerabilities 2026-10-01 14:15Z · RSS:exploit-db [webapps] InvoicePlane 1.7.1 - RCE 2026-10-01 14:15Z · RSS:exploit-db [webapps] SuiteCRM 8.10.1 - Authenticated SSRF 2026-10-01 14:15Z · RSS:exploit-db [webapps] Krayin CRM 2.2.4 - IDOR 2026-10-01 14:15Z · RSS:exploit-db [remote] MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE 2026-09-30 15:11Z · RSS:exploit-db