CISO Daily Digest: Dashlane Password Manager Users Locked Out in Wide (20260603)

Dashlane Password Manager Users Locked Out in Widespread Brute-Force Attacks

Users of the Dashlane password manager have been locked out of their accounts due to widespread brute-force attacks targeting the service. The attacks triggered account lockout mechanisms, preventing legitimate users from accessing their password vaults. Dashlane has confirmed the incident and is working on restoring access for affected users while implementing additional rate-limiting and anomaly detection measures to prevent further abuse.

🔗 參考資料： 綜合報導（Xakep）

本週活躍威脅

📌 Windows Netlogon RCE Exploitation Continues — Attackers Targeting Domain Controllers

Active exploitation of the Windows Netlogon remote code execution vulnerability continues, with attackers specifically targeting Domain Controllers to compromise entire enterprise network domains.

🔗 Reference: Xakep

📌 Anthropic Expands Mythos AI Security Program to 200+ Partners Globally

Anthropic has expanded Project Glasswing, its AI-powered vulnerability scanning initiative, to over 200 partner organizations including critical infrastructure operators across 15+ countries. The program has already identified over 10,000 security flaws.

🔗 Reference: TechCrunch | CyberScoop

📌 Red Hat npm Supply Chain Attack (Miasma) — Ongoing Impact Analysis

Security teams continue to assess the impact of the Miasma supply chain attack that compromised Red Hat npm packages. The credential-stealing worm’s propagation mechanisms are being analyzed as organizations scramble to rotate compromised tokens.

🔗 Reference: Xakep

📌 Atlas Menu Cheat Service Hacked — User Data Leaked

The Atlas Menu cheating service has been breached, with user data leaked online. The incident raises concerns about data security in gaming-adjacent services.

🔗 Reference: Xakep

📌 Tomcat Tribes Vulnerability (CVE) — Security Advisory

A newly disclosed vulnerability in Apache Tomcat’s Tribes component has been analyzed by security researchers, with patches recommended for affected deployments.

🔗 Reference: Xakep