Author: HackWatchit

MuddyWater deploys new DCHSpy variants amid Iran-Israel conflict Pierluigi Paganini July 21, 2025 Iran-linked APT MuddyWater is deploying new DCHSpy spyware variants to target Android users amid the ongoing conflict with Israel. Lookout researchers observed Iran-linked APT MuddyWater  (aka SeedWorm, TEMP.Zagros, and Static Kitten) is deploying a new version of the DCHSpy Android spyware in the context of the Israel-Iran conflict. The first MuddyWater campaign was observed in late 2017, when the APT group targeted entities in the Middle East. Experts named the campaign “MuddyWater” due to the confusion surrounding the attribution of a wave of attacks carried out between February and October 2017. These attacks targeted entities in…

Is Plaid safe to use? Mostly, yes. Plaid uses end-to-end encryption, tokenization, and regularly passes audits to keep your information protected. Still, its data practices and past lawsuits have made some users uneasy, especially those who didn’t realize how much info they were sharing. Below, we cover what Plaid is, how it works, and how safe it really is in practice. We also review the type of data it collects and shares, address some user concerns gathered from TrustPilot, and explore whether there are more privacy-focused alternatives you can try. What is Plaid and how does it work? Plaid is…

On Sunday, July 20, Microsoft Corp. issued an emergency security update for a vulnerability in SharePoint Server that is actively being exploited to compromise vulnerable organizations. The patch comes amid reports that malicious hackers have used the Sharepoint flaw to breach U.S. federal and state agencies, universities, and energy companies. Image: Shutterstock, by Ascannio. In an advisory about the SharePoint security hole, a.k.a. CVE-2025-53770, Microsoft said it is aware of active attacks targeting on-premises SharePoint Server customers and exploiting vulnerabilities that were only partially addressed by the July 8, 2025 security update. The Cybersecurity & Infrastructure Security Agency (CISA) concurred,…

In brief Pump.fun boasts some of the most impressive numbers in the entire crypto industry, growing faster than any crypto app before it. It recently raised $600 million in an ICO, but it’s PUMP token is now close to falling below its ICO price. As competitors rise and Pump.fun’s revenue slows, can the Solana meme coin factory continue to grow its business? It might be to dismiss meme coins as just another fad—a market full of traps and scams that arguably encourages the worst aspects of the cryptocurrency industry. But the Solana token launchpad Pump.fun has proven meme coins are…

Ring is warning that a backend update bug is responsible for customers seeing a surge in unauthorized devices logged into their account on May 28th. On May 28th, many Ring customers reported seeing unusual devices logged into their accounts from various locations worldwide, leading them to believe their accounts had been hacked. Last week, Ring posted to Facebook stating that they are aware “of a bug that incorrectly displays prior login dates as May 28, 2025.” Ring also updated its status page to say that these unauthorized logins are caused by a bug in a backend update that was released. “We…

Michael Calore: Go to the movies.Lauren Goode: Just go to the movies.Katie Drummond: I like that.Michael Calore: This is the worst time of year to go to the movies.Lauren Goode: No, it’s the best time of the year because air conditioning and comfy seats.Michael Calore: Yeah, but it’s-Katie Drummond: I’m with Lauren, that’s great advice.Lauren Goode: No, I’ve been three times this year and every time, very last minute. A friend invited me last minute to go see the 40th anniversary of Goonies that was playing downtown. We went, it was fantastic. I was hanging out with friends one night…

According to LinkedIn, job applications have surged over 45% in the past year, with 11,000 applications submitted every minute. This flood of applications is making it harder than ever for qualified candidates to stand out. The industry has become highly specialized. Gone are the days when you could land a job simply by calling yourself a generalist: hiring is based on specific skills that match defined roles. Know the role you’re applying for If you’re applying for every role you see, you’re already behind. Before submitting anything, get clear on what kind of work you want to do and what…

A pro-Kremlin cybercrime network has been taken offline after an international law enforcement operation disrupted over 100 of its servers, detained two gang members, and issued arrest warrants for seven more.The hacking group NoName057(16) has been operating since 2022, launching cyber attacks on government organisations, media bodies, critical infrastructure, and private companies in Ukraine, America, Canada, and across Europe in a seeming attempt to silence voices that the group considers anti-Russian.Operating largely through Telegram channels, NoName057(16) has gained a reputation for itself by launching distributed denial-of-service (DDoS) attacks For instance, earlier this year, the National Cyber Security Center (NCSC) in…

A phishing campaign targeting JavaScript developers has led to the compromise of several popular npm packages, including eslint-config-prettier. The breach began with an attacker tricking a maintainer using a fake login page hosted on a lookalike domain, npnjs.com. Once the attacker got hold of the maintainer’s npm token, they pushed malicious versions of key packages directly through the registry, completely bypassing the GitHub repositories. According to Socket, a developer-first security platform, which first spotted the scam, four versions of eslint-config-prettier (8.10.1, 9.1.1, 10.1.6, 10.1.7) were found to contain a script that executes on install, targeting Windows machines. The script attempts…