August 2026: GTA VI Leak, Keyv & Carhartt Breaches

This SOCRadar report summarizes a wide range of August 2026 security incidents: multiple large-scale data breaches affecting millions of individuals (Carhartt ~12.9M, Aesto Health ~9.54M, Unlimited Technology Systems ~3.8M, CareCloud ~3.76M, RingCentral ~1.6M, plus CEVA Logistics third-party exposures), supply-chain/eco-system compromises (LiteLLM PyPI credential-stealing packages impacting 2,500+ organizations and 434k CI/CD files; Keyv GitHub compromise leading to hundreds of poisoned npm packages and billions of monthly installs; 77 malicious Open VSX extensions), and active malware/campaign activity (DOUBLECUP loader and DeviceManager RAT, CyberLeek GTA VI leak facilitating secondary malware/credential theft). The report highlights transitive dependency risk, third-party exposure, and attacker techniques such as credential theft, provenance-abusing GitHub Actions pushes, blockchain-based EtherHiding, and tunneling for C2 communications.