A security researcher, in collaboration with Sam Curry, investigated the security of a major automaker's connected car system and discovered that the system's API requests made to a domain (redacted-telematics.com.au) exposed sensitive information, including an admin tool (admintool.redacted-telematics.com.au) that could potentially be used to unlock any car from the brand. The researcher was able to decompile the app, reconstruct API requests, and identify the domain, which led to the discovery of the admin tool. The automaker's connected car system was found to have a complex infrastructure, with various environments (admin tools, staging, dev, QA) available on the public internet, potentially making it vulnerable to exploitation.

Blockchain analysis firm Chainalysis has been targeted in a multifront cyberattack that resulted in hackers obtaining sensitive personal information, including names, usernames, password hashes, and live tokens, for all of its users. The attack, which used AI agent-assisted techniques and an on-path data snatch, has compromised the security of Chainalysis's high-profile customers, including government agencies and private companies such as Microsoft, Coinbase, and Barclays. The company has confirmed that the attackers accessed non-sensitive customer data, including user IDs, full names, email addresses, and organization role labels, and has since identified and fixed the attack vector used in the on-path attack. A further investigation revealed that customer information, including names, usernames, password hashes, and live tokens, were exposed to malicious actors, although it is unclear if the data was encrypted or not.