Author: HackWatchit

U.S. CISA adds Wing FTP Server flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 16, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Wing FTP Server flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Wing FTP Server flaw, tracked as CVE-2025-47812, to its Known Exploited Vulnerabilities (KEV) catalog. Wing FTP Server is a secure and flexible file transfer solution that supports multiple protocols, including FTP, FTPS, SFTP, and HTTP/S. It runs on Windows, Linux, and macOS, and provides a user-friendly web interface for both administrators and users. The vulnerability CVE-2025-47812 is caused by…

Enzoic for Active Directory is an easy-to-install plugin that integrates with Microsoft Active Directory (AD) to set, monitor, and remediate unsafe passwords and credentials. In essence, it serves as an always-on sentinel for AD, preventing users from choosing compromised or weak passwords and alerting administrators if any existing credentials become exposed in a breach. By layering continuous credential monitoring and customizable password policy enforcement onto AD, Enzoic aims to neutralize the very risks that make stolen passwords the #1 cause of data breaches. Enzoic for Active Directory’s main dashboard presents essential status tiles at a glance, including monitoring coverage, users…

A new form of cyberattack is on the rise, with hackers now using seemingly harmless Scalable Vector Graphics (SVG) image files to sneak malicious code past traditional defences, reveals the latest research from the Ontinue Advanced Threat Operations team. This technique, dubbed “SVG Smuggling” by researchers, weaponises these typically benign image files to redirect users to attacker-controlled websites without their knowledge. Ontinue’s findings, shared with Hackread.com, highlight these targeted attacks, primarily aimed at B2B Service Providers, including firms handling sensitive corporate data (like financial and employee information), Utilities, and SaaS providers, all frequently susceptible due to high email volumes. Phishing…

A hacker accessed the X account of beloved Sesame Street character Elmo, which included racist and antisemitic posts and a foul tirade about Trump and Jeffrey Epstein. The incident came a week after xAI’s Grok chatbot spewed antisemitic and white nationalist messages. The post Hacked Elmo X Account Spews Racist, Antisemitic Posts appeared first on Security Boulevard.

How America’s bold stablecoin legislation is reshaping the global digital economy and what it means for Canada’s tech future Picture this: You’re a Canadian entrepreneur who’s spent years building a cutting-edge digital payment platform. Your stablecoin technology could revolutionize cross-border transactions, reduce fees, and provide financial services to underserved communities. But there’s a problem. You’re spending more on lawyers than developers, navigating a regulatory maze that changes faster than your code base.Now imagine your biggest market, the United States, just drew a clear line in the sand. On June 17, 2025, the U.S. Senate passed the GENIUS Act with a…

Abacus Market, the largest Western darknet marketplace supporting Bitcoin payments, has shut down its public infrastructure in a move suspected to be an exit scam. Exit scams occur when the operator of a marketplace decides to vanish with the money they hold in escrow for various transactions between platform users. Blockchain intelligence firm TRM Labs reports that Abacus shutting down so abruptly has all the indications of either an exit scam or a covert law enforcement operation dismantling the activity. Historically, there have been “silent” takedowns that weren’t accompanied by announcements from the authorities, to allow investigations to continue unobstructed and…

a fantastic Streamlit app, and now it’s time to let the world see and use it.  What options do you have?  The easiest way is to use the Streamlit Community Cloud service. That method lets anyone online access your Streamlit app, provided they have the required URL. It’s a relatively straightforward process, but it’s a publicly available endpoint and, due to potential security issues and scalability options, it isn’t an option for most organisations. Since Streamlit was acquired by Snowflake, deploying to that platform is now a viable option as well.  The third option is to deploy to one of…

House appropriators are rejecting the Trump administration’s proposal to cut funding at the National Institute of Standards and Technology. The fiscal 2026 Commerce Department spending bill being considered by the House Appropriations Committee includes $1.28 billion for NIST, an 11% increase above the agency’s current funding levels. The subcommittee on commerce, justice, science and related agencies marked up its 2026 appropriations package on Tuesday. The Trump administration, meanwhile, had proposed a $325 million cut to NIST’s discretionary budget in fiscal 2026 compared to the agency’s 2025 budget. The proposal would slash more than 650 jobs at the agency. The administration…

Android Malware Konfety evolves with ZIP manipulation and dynamic loading Pierluigi Paganini July 15, 2025 A new Konfety Android malware variant uses a malformed ZIP and obfuscation to evade detection, posing as fake apps with no real functionality. Zimperium zLabs researchers are tracking a new, sophisticated Konfety Android malware variant that uses an “evil-twin” tactic and duplicate package names to avoid detection. The new Konfety malware variants use malformed ZIP, enabling a misleading flag and declaring an unsupported BZIP compression, to evade analysis tools. “The APK contains the bit 00 of the General Purpose Flags enabled. This causes some tools…