Daily digest,
Initia Chain Exploit Results in $2.6 Million Theft (+2 more)
Vulnerabilities
Initia Chain Exploit Results in $2.6 Million Theft
On October 23, 2026, an unauthorized actor exploited a vulnerability on Initia Chain, allowing them to mint tokens without authorization. This 'infinimint' exploit enabled the attacker to create approximately 2 million AUSD tokens, draining over $2.6 million in crypto assets. The attack was first reported by blockchain security researcher Spreek, who noted that the attacker converted these tokens into other assets, including 1.4 million AUSD, 105 Ether (ETH), and 1.08 million USDC, using cross-chain transfers to Ethereum. Initia halted its blockchain operations at 3:41 p.m. UTC on the same day to assess the damage and work with security researchers and exchanges. The extent of the impact on users and the timeline for restoring network operations remain unclear as Initia has not confirmed the total losses or the cause of the exploit.
Vulnerability · 2 sources · score 59
Breaches
Loblaw Data Breach Affects 2 Million Shoppers
Loblaw Companies Ltd. has notified approximately two million customers about a data breach that occurred in March 2026. The breach involved unauthorized access to personal information, including names, addresses, birthdates, and partial payment card details. While the company has offered two years of free credit monitoring and identity restoration services through TransUnion, the extent of the data leak varies for each affected individual. Customers are advised to be cautious of unexpected communications requesting personal information. The breach was detected in March when suspicious activity was identified on Loblaw's IT network, leading to an internal investigation and the strengthening of security measures. The company is currently notifying affected customers directly.
Breach · 3 sources · score 56
Threat actors and malware
Pakistan Targeted by Israeli Spyware Ad Campaign
A report by Citizen Lab reveals that Pakistan ranks second globally in malicious ad bids linked to an Israeli spyware campaign, with approximately 139 million bids identified. The campaign, operated by Discover-Tech, utilized a technique called 'AdFection' to deliver spyware via online ads without user interaction. The ads were found on over 100,000 instances on the Pakistani site WhatMobile.com.pk and also reached government-operated networks, although specific networks were not named. The spyware involved is linked to Candiru, now known as Integrity Labs, which has a history of targeting media organizations like Al Jazeera. The report identified a user named 'Pindi' accessing Discover-Tech's platform from Pakistan, but no direct link to a spyware company was established. The scale of this campaign poses significant cybersecurity risks for users in the affected networks.
APT · 2 sources · score 58 · Candiru, AdFection, Pindi Connection
New on leak sites
46 victims listed on ransomware leak sites by 19 groups in the 24 hours before this issue. The most active:
Also moving
- CVEs: CVE-2026-109618, CVE-2026-109619, CVE-2026-106073, CVE-2026-110264, CVE-2026-111497
- APT groups: APT28, Candiru, APT18, APT19, APT32
- Malware: Glassworm, Mythic, Agent Tesla, Aria-body, Astaroth
- Campaigns: Operation Economic Outcast, 2025 Poland Wiper Attacks, 3CX Supply Chain Attack, AdFection, AI-Assisted Breach Of Mexico's Government Infrastructure
- Ransomware groups: The Gentlemen, BitPaymer, Black Basta, Blackbyte, BlackByte Ransomware
Get the next one by email
The digest is free and arrives every morning. One click to leave.
A free account turns the digest into a personal watchlist: choose what you want to follow.