Author: HackWatchit
SafeBreach researchers have released details on several vulnerabilities that could be exploited by attackers to crash Windows Active Directory domain controllers (DCs), one one of which (CVE-2025-32724) can also be leveraged to force public DCs to participate in distributed denial-of-service (DDoS) attacks. Win-DDoS – as the researchers dubbed this new attack technique – hinges on the attackers’ ability to trick public DCs into connecting to a Lightweight Directory Access Protocol (LDAP) server they set up, which instructs them (via LDAP referrals) which specific victim server they should overwhelm with requests. CVE-2025-32724 and the Win-DDoS technique Domain controllers are the servers…
Introduction – May 2025: Beyond Gaza “When an ideology loses its center, it does not vanish—it multiplies into operational fractals, adapting where geography withdraws and control disintegrates.” After months of asymmetric escalation between Israel, Iran, and the United States, the Middle Eastern theater is taking shape as a new architecture of controlled chaos. The global spotlight remains fixed on drones, ICBMs, cyberattacks, and proxy conflicts—but behind the clash of powers, a quiet actor is repositioning: decentralized jihadism. From Afghanistan to Somalia, the Sahel to cyberspace, networks affiliated with ISIS and Al-Qa’ida are restructuring, recruiting, and exploiting geopolitical instability to launch…
Executive Summary This article presents our observations of exploit attempts targeting CVE-2025-32433. This vulnerability allows unauthenticated remote code execution (RCE) in the Secure Shell (SSH) daemon (sshd) from certain versions of the Erlang programming language’s Open Telecom Platform (OTP). Erlang/OTP sshd is widely used in critical infrastructure and operational technology (OT) networks.With a CVSS score of 10.0, CVE-2025-32433 enables unauthenticated clients to execute commands by sending SSH connection protocol messages (codes >= 80) to open SSH ports, which should only be processed after successful authentication. Vulnerable versions include Erlang/OTP prior to OTP-27.3.3, OTP-26.2.5.11 and OTP-25.3.2.20. A patch is available in…
The U.S. Department of Justice charged four Ghanaian nationals for their roles in a massive fraud ring linked to the theft of over $100 million in romance scams and business email compromise attacks. The defendants were allegedly high-ranking members of a major international fraud ring based in Ghana that targeted companies and individuals across the United States between 2016 and May 2023. Isaac Oduro Boateng (also known as “Kofi Boat”), Inusah Ahmed (“Pascal”), Derrick Van Yeboah (“Van”), and Patrick Kwame Asare (“Borgar”) were extradited from Ghana and arrived in the United States on August 7. “The defendants have been brought to the…
London, United Kingdom, August 11th, 2025, CyberNewsWire New Heimdal study reveals how tool sprawl creates blind spots, with over half of providers experiencing daily or weekly burnout Survey of 80 North American MSPs shows fragmented security stacks drive fatigue, missed threats, and business inefficiency Security tools meant to protect managed service providers are instead overwhelming them. A new study from Heimdal and FutureSafe reveals that 89% of MSPs struggle with tool integration while 56% experience alert fatigue daily or weekly. The research exposes a dangerous paradox. MSPs experiencing high alert fatigue are significantly more likely to miss real threats. The…
ESET researchers have discovered a previously unknown vulnerability in WinRAR, exploited in the wild by Russia-aligned group RomCom. If you use WinRAR or related components such as the Windows versions of its command line tools, UnRAR.dll, or the portable UnRAR source code, update right away to the latest release. According to ESET telemetry, malicious archives were used in spearphishing campaigns between July 18 to July 21, 2025, targeting financial, manufacturing, defense, and logistics companies in Europe and Canada. The aim of the attacks was cyberespionage. This is at least the third time that RomCom has been caught exploiting a significant…
Smart Buses flaws expose vehicles to tracking, control, and spying Pierluigi Paganini August 11, 2025 Researchers showed how hackers can exploit flaws in a bus’ onboard and remote systems for tracking, control and spying. Researchers Chiao-Lin ‘Steven Meow’ Yu of Trend Micro Taiwan and Kai-Ching ‘Keniver’ Wang of CHT Security, found that vulnerabilities in smart bus systems could let hackers remotely track, control, or spy on vehicles, exposing risks from insecure onboard and remote components. The duo presented their research during the DEF CON hacker conference last week, SecurityWeek reported. Researchers probed smart bus security after spotting free passenger Wi-Fi.…
Cary, United States, 11th August 2025, CyberNewsWire The post INE Named to Training Industry’s 2025 Top 20 Online Learning Library List appeared first on Security Boulevard.
London, United Kingdom, August 11th, 2025, CyberNewsWire New Heimdal study reveals how tool sprawl creates blind spots, with over half of providers experiencing daily or weekly burnout Survey of 80 North American MSPs shows fragmented security stacks drive fatigue, missed threats, and business inefficiency Security tools meant to protect managed service providers are instead overwhelming them. A new study from Heimdal and FutureSafe reveals that 89% of MSPs struggle with tool integration while 56% experience alert fatigue daily or weekly. The research exposes a dangerous paradox. MSPs experiencing high alert fatigue are significantly more likely to miss real threats. The…