Author: HackWatchit

Security consulting firm Midnight Blue on Thursday disclosed nine zero-day vulnerabilities in the Terrestrial Trunked Radio (TETRA) standard and in equipment used worldwide by law enforcement, military, and critical infrastructure operators. The findings build on the firm’s 2023 disclosure of the TETRA:BURST vulnerabilities. Three of the newly identified flaws affect the End-to-End Encryption (E2EE) layer, an additional security layer built on top of the Air Interface Encryption (AIE) layer, where the earlier vulnerabilities were found. Midnight Blue also uncovered six other previously unknown vulnerabilities affecting the TETRA standard and compatible devices. The E2EE vulnerabilities were discovered by reverse-engineering a Sepura…

SonicWall dismisses zero-day fears after Ransomware probe Pierluigi Paganini August 08, 2025 SonicWall found no evidence of a new vulnerability after probing reports of a zero-day used in ransomware attacks. SonicWall investigated claims of a zero-day being used in ransomware attacks but found no evidence of any new vulnerability in its products. SonicWall launched the investigation after a surge in Akira ransomware attacks targeting Gen 7 firewalls with SSLVPN enabled. The company worked to determine if the incidents stem from an existing flaw or a newly discovered vulnerability. “Over the past 72 hours, there has been a notable increase in both internally…

Tea, the woman-only dating advice app where users can anonymously rate and review men, has made quite a name for itself in recent weeks.Firstly it stirred controversy with its unpleasant take on digital vigilantism, providing a platform through which anyone could damage the reputation of a man with unverified claims, and no apparent method for them to have any comeback.And then, as we recently reported, Tea proved itself to be riddled with security problems that exposed sensitive user information, including images and private messages.Nonetheless, Tea managed to achieve a prime position towards the top of the app store charts.And so…

A survey of 200 North American security leaders found 63% see employees unintentionally giving AI agents access to sensitive data as the top internal threat. The post Survey: AI Agents Are Now Biggest Threat to Cybersecurity appeared first on Security Boulevard.

Executive Summary Unit 42 researchers recently observed a shift in the delivery method in the distribution of DarkCloud Stealer and the obfuscation techniques used to complicate analysis. First seen in early April 2025, these new methods and techniques include an additional infection chain for DarkCloud Stealer. This chain involves obfuscation by ConfuserEx and a final payload written in Visual Basic 6 (VB6). We previously identified a series of attacks linked to the distribution of DarkCloud Stealer. It also leveraged AutoIt to bypass detection systems. We documented these details in DarkCloud Stealer: Comprehensive Analysis of a New Attack Chain That Employs…

President Donald Trump signed an order on Aug. 7 allowing crypto in 401(k) plans, subject to agency rulemaking.The directive tells the Labor Department, the SEC, and Treasury to revisit constraints on plan menus, opening the door for defined contribution plans to add sleeves tied to Bitcoin and ether through pooled vehicles.The focus now is on the size of the default crypto allocations and the number of plans that implement them, since those factors will determine actual investment flows more than the policy announcement itself.According to the Investment Company Institute, defined contribution (DC) assets stood at $12.2 trillion on March 31,…

A sophisticated and large-scale cybercrime campaign, named GreedyBear, has been exposed for stealing at least a million dollars from cryptocurrency users. The research, carried out by cybersecurity firm Koi Security and shared with Hackread.com, reveals a highly organised operation that goes far beyond typical online scams. Instead of focusing on a single type of attack, the criminals behind GreedyBear are using a coordinated mix of malicious browser extensions, malicious software, and fake websites. This strategy allows them to attack from multiple angles at the same time, making their operation incredibly effective. How They Do It: Three Attack Methods One of…

July turned into a surprisingly busy month. It started slowly with a fairly ‘calm’ Patch Tuesday as I forecasted in my last blog. Although there were 130 new CVEs addressed across all the Microsoft releases, there was only one publicly disclosed CVE, so the risk was low. But a short time later, two CVEs in SharePoint were reported exploited, and the month started to heat up with hotfixes near the end of the month. Mix in some security configuration issues with Microsoft Exchange Server and some major updates from Google and Apple, and the month ended with lots of activity.…

The tables show the potential target jobs for IT workers. One sheet, which seemingly includes daily updates, lists job descriptions (“need a new react and web3 developer”), the companies advertising them, and their locations. It also links to the vacancies on freelance websites or contact details for those conducting the hiring. One “status” column says whether they are “waiting” or if there has been “contact.”Screenshots of one spreadsheet seen by WIRED appears to list the potential real-world names of the IT workers themselves. Alongside each name is a register of the make and model of computer they allegedly have, as…