Cybersecurity Roundup: Reported Mythos Access, France Titres Breach and SilentGlass
Summary
SecurityWeek’s roundup covers a Lovable BOLA exposure, France Titres’ confirmed portal breach, reported unauthorized access to Claude Mythos, a new UK NCSC display-link guard, and other security, policy and infrastructure developments.
Key points
- Lovable’s BOLA flaw allowed free-account users to read other users’ source code, database credentials and chat history. The company said a backend change had accidentally re-enabled access to public project chats.
- France Titres confirmed a breach of its ANTS portal that may have exposed millions of users’ data. A threat actor is reportedly trying to sell a database of roughly 19 million records; the article does not establish that the database is linked to the breach.
- Bloomberg reported that unauthorized users accessed Claude Mythos through a third-party vendor environment; Anthropic has restricted the portal.
- The UK NCSC introduced SilentGlass, a hardware device intended to block unexpected or malicious activity between HDMI or DisplayPort connections and screens, to help prevent data exfiltration.
- The FBI, CISA and international partners issued an advisory on a botnet of compromised SOHO routers and IoT devices used by China-linked Volt Typhoon to target critical infrastructure.
- Iranian state media alleged that networking equipment from several vendors failed during an attack in Isfahan, with local experts suspecting firmware backdoors or supply-chain compromise; the article provides no independent confirmation.
- Other developments include Sean Plankey withdrawing his CISA director nomination and Google announcing additional browser and mobile-device security controls.
Article Details
- Event Type
- Cybersecurity news roundup covering unauthorized access, data exposure, alleged attacks on infrastructure, botnet activity, and security products and policy.
- Impact
- The Lovable vulnerability reportedly exposed users’ source code, database credentials, and chat history. France Titres confirmed a breach that may have exposed millions of users’ data; a threat actor is reportedly trying to sell a database of roughly 19 million records. Volt Typhoon used compromised SOHO routers and IoT devices to target critical infrastructure sectors, according to a joint advisory. Other items include unauthorized access to Claude Mythos, alleged simultaneous outages of Iranian networking equipment, and measures to protect communications and reduce data leakage.
MITRE ATT&CK
T1078 · Valid AccountsNicholas Moore used stolen credentials to access the Supreme Court’s e-filing system and systems at AmeriCorps and the Veterans Administration Health System.T1584.008 · Network DevicesThe joint advisory says Volt Typhoon used a botnet of compromised SOHO routers and IoT devices.
People
Threat Actors
Nicholas MoorePlead guilty to using stolen credentials to access the Supreme Court’s e-filing system on 25 separate days and systems at AmeriCorps and the Veterans Administration Health System.Volt TyphoonThe joint advisory describes this China-linked, state-sponsored group as using a botnet of compromised SOHO routers and IoT devices to target critical infrastructure sectors.
Vendors
Products
AndroidGoogle has introduced new security capabilities within Chrome Enterprise and Android.Chrome Enterprise PremiumChrome Enterprise Premium now offers advanced data loss prevention and capabilities to address AI risks.Claude MythosClaude Mythos accessed by unauthorized testersLovableLovable’s shifting story on exposed user data SilentGlassNamed SilentGlass, the plug-and-play device “actively blocks anything unexpected or malicious between HDMI and Display Port connections and screens.” Recommended for high-threat environments, the device can now be
Countries
ChinaThe FBI, CISA, and international partners have released a joint advisory regarding a massive network of compromised SOHO routers and IoT devices orchestrated by China-linked threat actors.FranceFrance Titres, the agency responsible for passports and driver’s licenses, confirmed a security breach on its ANTS portal that may have exposed the data of millions of users.
Industries
Critical infrastructureThe state-sponsored group Volt Typhoon has used the botnet to target critical infrastructure sectors.DefenseThe withdrawal leaves the nation’s primary cyber defense agency without a permanent leader.Governmentfor high-threat environments, the device can now be acquired by anyone after being tested in government organizations.