Author: HackWatchit

PyPI maintainers alert users to email verification phishing attack Pierluigi Paganini July 30, 2025 PyPI warns of phishing emails from noreply@pypj[.]org posing as “[PyPI] Email verification” to redirect users to fake package sites. PyPI warns of an active phishing attack using fake “[PyPI] Email verification” messages from noreply@pypj[.]org, aiming to lure users to spoofed PyPI sites. PyPI, short for the Python Package Index, is the official repository for Python software packages. It’s where Python developers publish and share open-source Python libraries and tools, and where users can install those packages using the pip command (Python’s package installer). The maintainers pointed…

Although 79% of organizations are already running AI in production, only 6% have put in place a comprehensive security strategy designed specifically for AI. As a result, most enterprises remain exposed to threats they are not yet prepared to detect or respond to, according to the SandboxAQ AI Security Benchmark Report. AI risks raise alarm among security leaders The report, based on a survey of 102 senior security leaders across the US and EU, underscores widespread concern about the risks posed by AI, from model manipulation and data leakage to adversarial attacks and the exploitation of non-human identities (NHIs). Despite…

Identity-based attack paths are behind most breaches today, yet many organizations can’t actually see how those paths form. The 2025 State of Attack Path Management report from SpecterOps makes the case that traditional tools like identity governance, PAM, and MFA aren’t enough. They help manage access, but they miss the bigger problem: how identity and privilege sprawl across the environment in ways that attackers can string together. Attack Path Management (APM) is a continuous security practice, not a one-time project. It helps organizations map, understand, and dismantle the chains of access and control that attackers exploit. The real problem is…

Fraudsters are flooding Discord and other social media platforms with ads for hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited by players. Here’s a closer look at the social engineering tactics and remarkable traits of this sprawling network of more than 1,200 scam sites. The scam begins with deceptive ads posted on social media that claim the wagering sites are working in partnership with popular social media personalities, such as Mr. Beast, who recently launched a gaming business called Beast Games. The ads invariably state that…

Dragonfly managing partner Haseeb Qureshi revealed that the U.S. Department of Justice (DOJ) will not bring criminal charges against the crypto venture firm, as Tornado Cash co‑founder Roman Storm’s federal trial in Manhattan neared its conclusion.Qureshi, whose investment firm backed several blockchain startups, wrote on social media that federal prosecutor Nathan Rehn told the court July 28 that neither Dragonfly nor its principals were targets of the department’s investigation.He called the public clarification “unprecedented” and “a clear violation of DOJ policy,” citing the Justice Department’s usual practice of keeping target information confidential. The development comes days after Qureshi publicly denounced the…

phrase “just retrain the model” is deceptively simple. It has become a go-to solution in machine learning operations whenever the metrics are falling or the results are becoming noisy. I have witnessed whole MLOps pipelines being rewired to retrain on a weekly, monthly or post-major-data-ingest basis, and never any questioning of whether retraining is the appropriate thing to do. However, this is what I have experienced: retraining is not the solution all the time. Frequently, it is merely a means of papering over more fundamental blind spots, brittle assumptions, poor observability, or misaligned goals that can not be resolved simply…

Cybersecurity firm watchTowr has uncovered multiple serious vulnerabilities within SonicWall’s SMA100 series SSL-VPN appliances, highlighting ongoing security challenges in widely used network infrastructure devices. The in-depth research, which includes three critical CVEs, was shared with Hackread.com. The findings, confirmed against firmware version 10.2.1.15 and earlier versions, expose flaws that watchTowr Labs’ experts described as feeling “preserved in amber from a more naïve era of C programming.” Despite advancements in security, pre-authentication buffer overflows continue to surface. Among the vulnerabilities is CVE-2025-40596, a stack-based buffer overflow with a High severity CVSS score of 7.3. This flaw can be triggered before a…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) launched on Tuesday a new ‘The Journey to Zero Trust’ series covering cybersecurity capabilities and architecture supporting organization adoption of modern zero trust (ZT) principles. Addressing microsegmentation in zero trust, CISA provides federal agencies with foundational guidance on implementing microsegmentation as part of zero trust architecture. It outlines key concepts, challenges, and benefits, emphasizing that microsegmentation reduces attack surfaces, limits lateral movement, and improves monitoring. Rather than replacing existing security measures, it strengthens defense-in-depth by enabling more precise, risk-based protections. In the first part titled ‘Microsegmentation in Zero Trust, Part One: Introduction…

The adoption process is inherently sensitive, involving deeply personal information about children, birth parents, adoptive parents, and other caregivers. So when longtime data-breach hunter and security researcher Jeremiah Fowler came across a publicly accessible database online at the end of June that seemed to contain information related to adoption, he was instantly concerned.Fowler scrambled to identify the owner of the database, which he concluded was the largely Texas-based nonprofit Gladney Center for Adoption. He then worked to notify the organization about the exposed data on June 25 but received no reply. He attempted notification again on June 26, and within…