Weekly Cryptocurrency Hack Roundup
—Tornado Cash co-founder convicted
—Samourai Wallet founders' guilty plea
—Coinbase's loss from insider data theft
—U.S. appeals court overturned an OpenSea executive's NFT fraud conviction
—AI-written NPM malware stole crypto
—Credix exploit
—Changpeng Zhao sought dismissal of FTX claim
—Crypto ATM warning from FinCEN
https://www.databreachtoday.com/cryptohack-roundup-verdict-in-tornado-cash-founders-case-a-29144
Airlines KLM and Air France detail customer data breach; ShinyHunters may have struck again https://www.databreachtoday.com/airlines-klm-air-france-detail-customer-data-breach-a-29143
On the rise: ransomware victims, data breaches, infostealers, new vulnerability disclosures with exploits, as researchers track 'acceleration' in existing threats, ongoing criminal success
https://www.databreachtoday.com/on-rise-ransomware-victims-breaches-infostealers-a-29137
Fascinating looks at "Project Red Hook," a US probe into "Chinese gift card fraud at scale," in which fraudsters reveal a card PIN code, silver it back up, sneak it back onto a store rack, then drain the card ASAP once a consumer activates it.
https://garwarner.blogspot.com/2025/08/project-red-hook-chinese-gift-card.html
The U.S. cyber defense agency is billing a $100 million cybersecurity grant rollout as a fresh investment in state and local protections, but experts say the grants are smaller than in past years and highlight the Trump administration shifting cybersecurity responsibility to states without sufficient funding.
https://www.databreachtoday.com/cisa-unveils-final-100m-cyber-grants-as-state-burdens-soar-a-29130
Hacks on 3 specialty medical providers in United States affect nearly 800,000 individuals
https://www.databreachtoday.com/hacks-on-3-specialty-medical-providers-affect-nearly-800000-a-29128
SonicWall is investigating a potential zero-day in its Gen 7 firewalls after they get infected by Akira ransomware. Pending the results of that investigation, the company "strongly" advised all customers to immediately disable their SSL VPN services "where practical," and regardless to follow additional mitigation steps to better lock down their devices.
https://www.databreachtoday.com/sonicwall-probes-potential-zero-day-after-ransomware-hits-a-29127
Mathew J. Schwartz