Author: HackWatchit

Adobe released emergency updates for two zero-day flaws in Adobe Experience Manager (AEM) Forms on JEE after a PoC exploit chain was disclosed that can be used for unauthenticated, remote code execution on vulnerable instances. The flaws are tracked as CVE-2025-54253 and CVE-2025-54254: CVE-2025-54253: Misconfiguration allowing arbitrary code execution. Rated “Critical” with a CVSS score of 8.6. CVE-2025-54254: Improper Restriction of XML External Entity Reference (XXE) allowing arbitrary file system read. Rated “Critical” with a maximum-severity 10.0 CVSS score. Adobe has fixed the flaws in the latest versions as described in this advisory. The vulnerabilities were discovered by Shubham Shah and…

A new release of CrowdStrike Falcon® Adversary Intelligence delivers automatically prioritized threat intelligence tailored to each unique customer environment. By surfacing the right intelligence at the right time, this update enhances SOC workflows by enabling faster triage, deeper investigations, and more confident response. Today’s organizations understand threat intelligence is critical to stay ahead of adversaries, but many struggle to determine which threats matter most and how to act on them. SOC teams are overwhelmed by noisy data and constrained by fragmented tools that force analysts to manually stitch together investigations, wasting time and increasing the risk of missed threats.  This…

Palo Alto Networks’ Unit 42 has identified multiple intrusions targeting the telecommunications sector in Southwest Asia, tracked as CL-STA-0969. The activity involves exploitation of interconnected mobile roaming networks. The report offers a technical analysis of the cluster, drawing on incident response data and observed tactics, techniques, and procedures (TTPs). The CL-STA-0969 activity occurred between February and November 2024. While it shows significant overlap with the group known as Liminal Panda, overlaps in attacker tooling were also identified with other reported groups and activity clusters, including Light Basin, UNC3886, UNC2891, and UNC1945. The activity remained undetected by employing a range of…

Preface RSA Conference just wrapped up, and while phrases like “We are an Agentic AI solution for XYZ,” “AI in Cybersecurity,” and “Risks of AI Adoption” echoed across the expo halls, panels, and keynotes, you probably caught a few sessions on quantum threats and Post-Quantum Cryptography (PQC) too. Beyond RSA, the noise about quantum is everywhere!! Articles, LinkedIn rants, webinars, fireside chats, even happy hour small talk – all swirling around a common narrative: quantum computers will soon break all encryption, and attackers will “harvest now, decrypt later.” On one end, pundits (many without any background in cryptography) are proclaiming…

objects around us can be slightly radioactive. Americium in smoke detectors, radium in some vintage watches, or uranium in vintage glass; a full list can be long. Mostly, these objects are safe and cannot cause a health risk. It is also interesting to identify them and study the matter on the atomic level. And we can do this using a radiation detector. In the first part, I did an exploratory data analysis of the gamma spectroscopy data. In the second part, I created a machine learning model for detecting radioactive isotopes. This is the last 3rd part, and it’s time to add…

Cisco disclosed a CRM data breach via vishing attack Pierluigi Paganini August 05, 2025 Cisco disclosed CRM data breach via vishing attack; basic user info was exposed, but no sensitive data or systems were compromised Cisco has confirmed a data breach involving a third-party CRM system, exposing basic profile details (e.g. names, emails, and phone numbers) of users who registered on Cisco.com. The breach was discovered on July 24 after a vishing attack targeted one of Cisco’s representatives, allowing the attacker to access limited user information. “On July 24, 2025 (GMT+9), Cisco was made aware of an incident involving a…

Every CISO must assess their organization’s AI readiness from technology and talent to governance and compliance. The post Four Areas CISOs Must Assess Before Being AI Ready appeared first on Security Boulevard.

In episode 62 of The AI Fix, your hosts learn how AI models smash through CAPTCHA roadblocks like they’re made of wet tissue paper – so much for humanity’s last line of defence. Meanwhile, we meet a bottle-flipping robot and call BS on a cartwheeling cyborg, Graham has a full-blown breakdown over traffic light puzzles, and Anthropic hires an AI psychiatry team to figure out why its bots are unhinged. Also: Microsoft helpfully tells us which jobs are toast, Vogue replaces models with AI-generated glam-bots, and a tiny homebrew neural net humiliates the big boys at Sudoku. Plus, Mark explores…

Can Web3 gaming finally offer the kind of seamless experience traditional games have had for years? DAR Open Network believes it can and the newly launched DAR Citizenship program is its attempt to prove it. DAR Citizenship, which officially went live on August 5, 2025, introduces a unified premium membership model for gamers across the DAR Open Network ecosystem. This means that players of titles like Mines of Dalarnia and Dalarnia Legends can now use a single interoperable pass to unlock cross-game perks, token rewards, and early access benefits, regardless of the chain or game they are playing.What Is DAR…