Author: HackWatchit
Trend Micro fixes two actively exploited Apex One RCE flaws Pierluigi Paganini August 06, 2025 Trend Micro patched two critical Apex One flaws (CVE-2025-54948, CVE-2025-54987) exploited in the wild, allowing RCE via console injection. Trend Micro released fixes for two critical vulnerabilities, tracked as CVE-2025-54948 and CVE-2025-54987 (CVSS score of 9.4), in Apex One on-prem consoles. The cybersecurity vendor confirmed that both issues were actively exploited in the wild. Both vulnerabilities are command injection remote code execution (RCE) issues on Apex One Management Console (on-premise). “Trend Micro has observed as least one instance of an attempt to actively exploit one of…
The latest generative AI models are not just stand-alone text-generating chatbots—instead, they can easily be hooked up to your data to give personalized answers to your questions. OpenAI’s ChatGPT can be linked to your Gmail inbox, allowed to inspect your GitHub code, or find appointments in your Microsoft calendar. But these connections have the potential to be abused—and researchers have shown it can take just a single “poisoned” document to do so.New findings from security researchers Michael Bargury and Tamir Ishay Sharbat, revealed at the Black Hat hacker conference in Las Vegas today, show how a weakness in OpenAI’s Connectors…
Project Red Hook is a Homeland Security Investigations operation examining how Chinese Organized Crime is committing wholesale Gift Card Fraud by using Chinese illegal immigrants to steal gift cards, reveal their PIN, reseal the cards, and return them to store racks. When the card is later purchased and activated, operators are standing by to quickly drain the card before the customer can use it. How many cards are we talking about? More than $1 Billion worth! Here are a few cases of interest to me – especially the first one! Birmingham, Alabama https://www.justice.gov/usao-ndal/pr/chinese-nationals-charged-illegally-possessing-counterfeit-and-unauthorized-gift-cards 25JUN2025 – the Hoover Alabama Police Department…
In brief Carlos Ramirez, known as Whynne online, said in his first interview in 10 years that he is “constantly” being approached with offerings of token supply for Trollface-related meme coins. The Troll meme coin has skyrocketed more than 1,050% in value over the past two weeks. It is now the 32nd largest meme coin in the world. Creator of the vintage internet meme Trollface told Decrypt that he has “no interest” in getting involved in the surging Solana meme coin based on his creation, as crypto’s capitalistic nature interferes with artistic expression. That said, he ruled out pressing legal action…
Security teams don’t need more alerts. They need the ability to detect what others miss. That’s why we’re excited to announce the general availability of CrowdStrike® Signal, a new class of AI-powered detection that surfaces the stealthy threats others often overlook — before they escalate. CrowdStrike Signal represents a fundamental shift in how organizations detect and respond to modern threats. Using self-learning AI to build models for every host, CrowdStrike Signal understands what’s normal in each environment across time, systems, and users. It pinpoints subtle, early-stage threat activity and notifies analysts with a single high-confidence lead, while legacy tools wait…
Akira ransomware is abusing a legitimate Intel CPU tuning driver to turn off Microsoft Defender in attacks from security tools and EDRs running on target machines. The abused driver is ‘rwdrv.sys’ (used by ThrottleStop), which the threat actors register as a service to gain kernel-level access. This driver is likely used to load a second driver, ‘hlpdrv.sys,’ a malicious tool that manipulates Windows Defender to turn off its protections. This is a ‘Bring Your Own Vulnerable Driver’ (BYOVD) attack, where threat actors use legitimate signed drivers that have known vulnerabilities or weaknesses that can be abused to achieve privilege escalation. This…
about to hand down a sentence just before lunch. Most people would assume the timing doesn’t matter for the outcome, but a provocative study suggested that when judges get hungry, justice gets harsh – a phenomenon that became known as the hungry judge effect [1]. While this specific finding remains hotly debated, there are other seemingly irrelevant factors beyond a growling stomach and low blood sugar that can influence a judge’s, or in fact anyone’s, decision [2,3], such as whether it is the defendant’s birthday, whether it’s hot outside, or more generally, the mood of the judge. This highlights one…
Written by Alireza Liaghat || Reviewed by Dale Hobbs This blog is part of Offensive Tooling Cheatsheets: An Infosec Survival Guide Resource. You can learn more and find all of the cheatsheets HERE: https://www.blackhillsinfosec.com/offensive-tooling-cheatsheets/ Nmap Cheatsheet: PRINT-FRIENDLY PDF Find the tool here: https://nmap.org/ Nmap is a powerful open-source tool commonly used by system/network administrators and security professionals to perform network discovery, security auditing, and basic vulnerability assessment. Nmap allows you to quickly identify live hosts, open ports, running services, operating systems, and potential security risks within a network. This cheatsheet provides a reference to essential Nmap commands, scanning techniques, and…
Ukraine’s Defence Intelligence agency (HUR) claims that its hackers have successfully stolen secret files and classified data on a state-of-the-art Russian nuclear submarine, the “Knyaz Pozharsky.”The “Knyaz Pozharsky” is nuclear-powered ballistic missile submarine, that was commissioned into the Russian Navy’s Northern Fleet at a shipyard in Severodvinsk during a ceremony overseen by Russian President Vladimir Putin on 24 July 2025.The submarine features advanced stealth facilities, designed to allow it to slip past NATO defences, as well as significant strike capability.However, what should have been a show of Russia’s naval might has seemingly turned into a major intelligence embarrassment, with HUR…