This week saw significant cybersecurity incidents, including a Dashlane breach and a Trezor chip vulnerability.
Recent developments in cybersecurity reveal a range of significant incidents affecting users and companies alike.
- Hackers have breached the password manager Dashlane, compromising some user accounts.
- A vulnerability was identified in the Trezor Safe 7 cryptocurrency wallet's chip.
- Chinese hackers are increasingly targeting European organizations.
- Fraudsters manipulated AI support to steal rare Instagram accounts.
Dashlane Users Compromised
Hackers successfully bypassed two-factor authentication (2FA) to access the encrypted vaults of Dashlane users, as confirmed by the company. The breach began on May 31, 2026, when attackers targeted API endpoints for new device registrations, conducting brute-force attacks on the six-digit codes sent to users.
Despite Dashlane's automated systems detecting unusual activity and temporarily blocking affected accounts, some hackers were able to guess the correct codes for a few victims. This allowed them to authorize their devices and download complete copies of encrypted vaults. Fortunately, Dashlane reported that less than 20 users were impacted, and no internal infrastructure was compromised. The company has since enhanced its security measures.
Experts noted that the stolen databases remain secure without the victims' master passwords, although the vaults are now in the attackers' possession, which poses a risk of local cracking.
Trezor Safe 7 Chip Vulnerability Discovered
A security flaw in the TROPIC01 chip used in Trezor Safe 7 wallets was uncovered by the security research team at Ledger Donjon. They executed a Laser Fault Injection attack that allowed them to bypass firmware signature checks and extract some protected data.
Trezor representatives clarified that compromising the chip alone does not grant access to users' PIN codes or private keys, which are not stored on the TROPIC01 chip. Exploiting this vulnerability requires physical access to the wallet and specialized equipment. Trezor reassured users that no action is needed as the wallet's design effectively mitigates this risk.
Chinese Hackers Expanding Targets in Europe
Since March 2026, the Chinese hacking group TA4922 has ramped up its activities, now focusing on organizations in Europe, including those in Germany, Italy, the UK, and South Africa. Previously, their operations were limited to East Asia.
Experts report that the group uses sophisticated phishing tactics to breach systems, mimicking legitimate communications such as payroll notifications. They have deployed a new remote access trojan named Atlas, which enables extensive spying capabilities, including keystroke logging and audio recording.
Additionally, the group has introduced a stealthy loader, RomulusLoader, to launch remote administration tools, indicating a possible adaptation of large language models (LLMs) for software development.
Fraudsters Exploit Meta's AI Support
Some Instagram users have lost access to their accounts due to a vulnerability in Meta's AI support system. Attackers exploited this by manipulating the automated identity verification process, using deepfakes to impersonate victims.
Following the attack protocol, perpetrators managed to change account email addresses and passwords, targeting accounts with unique usernames valued in the tens of thousands of dollars. Victims have reported significant difficulties in regaining access, citing a lack of effective human support from Meta.
Meta's Vice President of Communications, Andy Stone, stated that the issue has been addressed, ensuring the security of affected accounts, though further details were not provided.
WeedHack Malware Affects Minecraft Users
McAfee has reported a large-scale malware campaign named WeedHack that has impacted over 116,000 Minecraft users. The malware proliferates through infected mods and clients, leveraging SEO tactics to attract users.
This malware can steal sensitive information such as session IDs and passwords, with a premium version offering full remote access to infected PCs. Additionally, a data leak affecting 64,000 users of a cheat service for Grand Theft Auto V has also surfaced, with stolen data posted online.
As the cybersecurity landscape continues to evolve, these incidents highlight the ongoing challenges and risks faced by users and organizations alike.
