Author: HackWatchit

ERMAC 3.0 Source Code Leak Reveals Expanding Threat Pierluigi Paganini August 17, 2025 Hunt.io got ERMAC 3.0’s source code, showing its evolution from Cerberus and Hook, now targeting 700+ banking, shopping, and crypto apps. Hunt.io cybersecurity researchers obtained the full source code of the Android banking trojan ERMAC 3.0, revealing its evolution from Cerberus and Hook (ERMAC 2.0), targeting 700+ apps. The experts also spotted exploitable weaknesses in its infrastructure that defenders can exploit to disrupt campaigns. “Its earliest versions were built using the leaked Cerberus source code, and by late 2023, version 2.0 had incorporated large portions of the Hook botnet’s codebase. The…

David’s Bridal once helped you snag a gown; now it wants to outfit your inner gremlin. The 70-year-old retailer will make you a dress for your Labubu plushie. It’s the latest twist in the runaway toy craze that’s turned Pop Mart’s snaggle-toothed sprite into a $1 billion culture bomb. But wedding aisles are hardly the weirdest place you can nab (or lose) a Labubu. Strap in. Where to Buy a Labubu When You’ve Lost Your Mind Mall claw machines, but make it covert. In Los Angeles, collectors stalk random “surprise drops” in Pop Mart-branded vending machines scattered through Westfield Century City…

Zero trust frameworks challenge traditional perimeter-based security models by adopting a “never trust, always verify” approach. Unlike legacy security systems, zero trust requires continuous identity verification, strict least-privilege access controls, and persistent monitoring to mitigate threats. Successful zero trust implementation involves a strategic approach that encompasses strong identity and access management (IAM), network security controls, endpoint protection, decryption for traffic visibility, and automated incident response. By enforcing robust security policies using micro-segmentation and leveraging technologies such as multifactor authentication (MFA), secure access service edge (SASE), and extended detection and response (XDR), organizations can enhance their cybersecurity and protect sensitive data…

Zimperium’s zLabs team uncovers a critical security flaw in the popular Android rooting tool, KernelSU v0.5.7. Learn how this vulnerability could allow attackers to gain full root access and compromise your device. Mobile security firm Zimperium has exposed a serious vulnerability in a popular tool used to root Android devices. The research, conducted by Zimperium’s zLabs team and shared with Hackread.com, reveals a critical flaw in KernelSU, a framework that gives users deep control over their phones. This weakness could allow a malicious app to take over a device completely, giving an attacker full access to personal data and system…

ChatGPT’s Voice mode is already pretty good, but OpenAI is working on a new feature that will allow you to control how Voice mode actually works. As you can see in the screenshot below, OpenAI has added “Voice speed” to the ChatGPT web app settings for voice mode. This means you can control how fast ChatGPT can speak. You can lower it to 0.5x or make it as far as 2.0x. There is a slider that allows you to specify the ChatGPT pace. These options are currently hidden. Also, OpenAI has added “custom instructions prefix,” which will allow Voice mode to remember your instructions, so…

Over the past three years, Ethereum has tested the patience of even its most loyal holders. While Bitcoin and Solana were busy setting new records, ETH often trailed behind—enough to make even the most committed rethink their strategy. Editor’s note: This article is for informational purposes only and does not constitute investment advice. Cryptocurrencies are speculative, complex, and involve high risks. This can mean high prices volatility and potential loss of your initial investment. You should consider your financial situation, investment purposes, and consult with a financial advisor before making any investment decisions. The HackerNoon editorial team has only verified…

Growing use of social engineering capabilities by cyber adversaries across OT (operational technology) environments is driving a new class of high-consequence threats that threaten the stability of critical systems. Deception, technical compromise, and human manipulation are being combined in ways that abuse the traditional trust models on which industrial systems rely, leaving asset owners and operators to face new and emerging threats and attacks. While conventional IT breaches typically lead to data loss or financial fraud, a successful social engineering attack across OT installations has the potential to shut down production, interrupt critical services, and even threaten public safety. With…

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter From Drone Strike to File Recovery: Outsmarting a Nation State  New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises   Unmasking Interlock Group’s Evolving Malware Arsenal   Persistent Risk: XZ Utils Backdoor Still Lurking in Docker Images SCENE 1: SoupDealer – Technical Analysis of a Stealth Java Loader Used in Phishing Campaigns Targeting Türkiye Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks Malvertising campaign leads to PS1Bot, a multi-stage malware framework  ‘Blue Locker’ Analysis: Ransomware…

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: WinRAR zero-day was exploited by two threat actors (CVE-2025-8088)The RomCom attackers aren’t the only ones that have been leveraging the newly unveiled WinRAR vulnerability (CVE-2025-8088) in zero-day attacks: according to Russian cybersecurity company BI.ZONE, a group tracked as Paper Werewolf has been using it to target Russian organizations. Microsoft fixes “BadSuccessor” Kerberos vulnerability (CVE-2025-53779)For August 2025 Patch Tuesday, Microsoft has released security updates resolving 100+ security vulnerabilities in its various solutions, including a relative path traversal flaw in Windows Kerberos (CVE-2025-53779) that allows an authorized…