Author: HackWatchit

International law enforcement has dealt a significant blow to cybercrime this week, successfully seizing the vital online infrastructure of the notorious BlackSuit ransomware gang. In a coordinated international operation dubbed “Operation Checkmate,” authorities specifically targeted and took control of the group’s .onion data leak sites and negotiation platforms, which had compromised hundreds of organisations globally in recent years. The seizure has been confirmed as two of the BlackSuit domains (1, 2) now display a banner announcing their closure by law enforcement, marking a major victory against ransomware threats worldwide. This operation involved strong collaboration among numerous agencies from various countries,…

In brief Hackers leaked 72,000+ selfies, IDs, and DMs from Tea’s unsecured database. The private info of women using the app is now searchable and spreading online. The original leaker said lax “vibe coding” may have been one of the reasons why the app was left wide open to attack. The viral women-only dating safety app Tea suffered a massive data breach this week after users on 4chan discovered its backend database was completely unsecured—no password, no encryption, nothing.The result? Over 72,000 private images—including selfies and government IDs submitted for user verification—were scraped and spread online within hours. Some were…

Unpatched flaw in EoL LG LNV5110R cameras lets hackers gain Admin access Pierluigi Paganini July 25, 2025 Hundreds of LG LNV5110R cameras are affected by an unpatched auth bypass flaw that allows hackers to gain admin access. US Cybersecurity and Infrastructure Security Agency warns that hundreds of LG LNV5110R cameras are impacted by an unpatched authentication bypass vulnerability. The flaw, tracked as CVE-2025-7742 (CVSS score of 8.3), can allow attackers to gain admin access. The vulnerability was reported to CISA by the researcher Souvik Kandar. An attacker can trigger to vulnerability to upload an HTTP POST request to the device’s non-volatile…

New findings from Sygnia reveal an ongoing espionage campaign, dubbed Fire Ant, that has been active since early 2025. As part of Sygnia’s investigation into Fire Ant, the company found the tooling and techniques closely align with prior espionage campaigns conducted by a China-linked espionage group, UNC3886, currently active in Singapore. Fire Ant’s overlap with UNC3886 includes specific binaries and exploitation of VMware vCenter and ESXi vulnerabilities, as well as similar targeting of critical infrastructure across regions. The cyber adversary is said to be actively leveraging advanced methods to gain access to virtualization and networking environments by creating multi-layer attack…

refers to the careful design and optimization of inputs (e.g., queries or instructions) for guiding the behavior and responses of generative AI models. Prompts are typically structured using either the declarative or imperative paradigm, or a mixture of both. The choice of paradigm can have a big impact on the accuracy and relevance of the resulting model output. This article provides a conceptual overview of declarative and imperative prompting, discusses advantages and limitations of each paradigm, and considers the practical implications. The What and the How In simple terms, declarative prompts express what should be done, while imperative prompts specify…

Luxury conglomerate LVMH is reportedly looking to sell fashion brand Marc Jacobs for about $1 billion. LVMH is discussing deals with multiple parties and could reach a deal soon, the Wall Street Journal (WSJ) reported Friday (July 25), citing unnamed sources. LVMH did not immediately reply to PYMNTS’ request for comment. According to the WSJ report, the company is known for both buying and selling assets. It acquired Tiffany in 2021, sold Donna Karan and DKNY in 2016, and recently sold its interests in Off-White and Stella McCartney. LVMH Chief Financial Officer Cécile Cabanis said Thursday (July 24) during an earning call, per the report: “We will not keep…

A hacker planted data wiping code in a version of Amazon’s generative AI-powered assistant, the Q Developer Extension for Visual Studio Code. Amazon Q is a free extension that uses generative AI to help developers code, debug, create documentation, and set up custom configurations. It is available on Microsoft’s Visual Code Studio (VCS) marketplace, where it counts nearly one million installs. As reported by 404 Media, on July 13, a hacker using the alias ‘lkmanka58’ added unapproved code on Amazon Q’s GitHub to inject a defective wiper that wouldn’t cause any harm, but rather sent a message about AI coding security. The commit contained a data…

Here’s a look at the most interesting products from the past week, featuring releases from Akeyless, Bitdefender, Malwarebytes, ManageEngine, PlexTrac, and Seemplicity. PlexTrac Workflow Automation Engine enhancements accelerate time to remediation PlexTrac launched enhanced Workflow Automation Engine, a major product update designed to standardize workflows across the vulnerability lifecycle, automate pentest findings delivery, accelerate time to remediation, and increase operational efficiency. By leveraging the unified security data already centralized in PlexTrac, the new automation capabilities drive consistent, end-to-end vulnerability lifecycle management. Bitdefender boosts protection across major content platforms Bitdefender expanded support for Facebook and Instagram for Bitdefender Security for Creators,…

Operation CargoTalon targets Russia’s aerospace with EAGLET malware, Pierluigi Paganini July 25, 2025 Operation CargoTalon targets Russia’s aerospace and defense sectors with EAGLET malware, using TTN documents to exfiltrate data. SEQRITE Labs researchers uncovered a cyber-espionage campaign, dubbed Operation CargoTalon, targeting Russia’s aerospace and defense sectors, specifically Voronezh Aircraft Production Association (VASO), via malicious TTN documents. “Товарно-транспортная накладная” (TTN) is a “goods and transport invoice” or “consignment note” used in Russia and other post-Soviet countries. “Recently, on 27th of June, our team upon hunting malicious spear-phishing attachments, found a malicious email file, which surfaced on sources like VirusTotal, upon further hunting, we…