Supply Chain Attacks Surge, Coinbase Breach Fallout, and OPSEC Failures Hit Scattered Spider

News

Coinbase Breach Exposes Customer Data via Insider Bribery, Refuses $20M Ransom

Attackers bribed Coinbase support staff to leak customer names, addresses, and partial account data affecting roughly 1% of users. This is a textbook insider threat play and a reminder that your perimeter controls mean nothing if someone on payroll is the vulnerability.

CISA Adds Three New Vulnerabilities to KEV Catalog Including GeoServer and Linux Kernel Flaws

CISA flagged fresh entries including a GeoServer RCE and a Linux kernel privilege escalation as actively exploited. If you're running GeoServer in any internet-facing capacity, treat this as a drop-everything patch situation.

Tools

Nuclei Templates Updated with Coverage for Recent SAP, Ivanti, and GeoServer CVEs

ProjectDiscovery pushed new templates covering several high-priority CVEs from the past two weeks, including the SAP NetWeaver RCE and fresh Ivanti findings. If you run continuous scanning, pull this update now before your next scan cycle.