Author: HackWatchit
Hackers have started to exploit a critical remote code execution vulnerability in Wing FTP Server just one day after technical details on the flaw became public. The observed attack ran multiple enumeration and reconnaissance commands followed by establishing persistence by creating new users. The exploited Wing FTP Server vulnerability is tracked as CVE-2025-47812 and received the highest severity score. It is a combination of a null byte and Lua code injection that allows remote a unauthenticated attacker to execute code with the highest privileges on the system (root/SYSTEM). Wing FTP Server is a powerful solution for managing secure file transfers that can…
The Department of Justice and the FBI’s Atlanta Field Office confirmed today that they have seized and dismantled several notorious online marketplaces distributing pirated video games. The targeted sites had gained popularity for leaking unreleased titles to millions of users worldwide. Visitors who try to reach these domains now see a federal notice stating “This website has been seized” and “This domain has been seized by the Federal Bureau of Investigation” instead of download links. The full list of seized websites includes the following: Nswdl.com Nsw2u.com Ps4pkg.com Ps4pkg.net Mgnetu.com Game-2u.com Bigngame.com According to the FBI’s press release, from late February…
While IT departments race to implement AI governance frameworks, many employees have already opened a backdoor for AI, according to ManageEngine. The rise of unauthorized AI use Shadow AI has quietly infiltrated organizations across North America, creating blind spots that even the most careful IT leaders struggle to detect. Despite formal guidelines and sanctioned tools, shadow Al has become the norm rather than the exception. 70% of IT decision makers (ITDMs) have identified unauthorized AI use within their organizations. 60% of employees are using unapproved AI tools more than they were a year ago, and 93% of employees admit to…
GTT Communications extended its alliance with Palo Alto Networks to include an additional managed secure access service edge (SASE) offering. The post GTT Extends Palo Alto Networks Alliance to Add Managed SASE Service appeared first on Security Boulevard.
DV8 Public Company Limited, a publicly listed firm in Thailand looking to reinvent itself as a Bitcoin Treasury firm, has appointed Thai business magnate Chatchaval Jiaravanon as its new Chairman, according to a July 11 statement shared with CryptoSlate.Jiaravanon, best known internationally for acquiring Fortune Magazine in 2018, is part of Thailand’s influential Charoen Pokphand Group family.DV8’s leadership changeHis appointment comes amid a broader leadership revamp at DV8 to align the company with emerging crypto-native financial models.Under his guidance, the firm plans to adopt Bitcoin-centric treasury practices and invest in DeFi, corporate governance innovation, and next-generation digital infrastructure.DV8 also revealed…
in the field of large language models (LLM) and their applications is extraordinarily rapid. Costs are coming down and foundation models are becoming increasingly capable, able to handle communication in text, images, video. Open source solutions have also exploded in diversity and capability, with many models being lightweight enough to explore, fine-tune and iterate on without huge expense. Finally, cloud AI training and inference providers such as Databricks and Nebius are making it increasingly easy for organizations to scale up their applied AI products from POCs to production ready systems. These advances go hand in hand with a diversification of…
The Australian Defence Force (ADF) and the Philippine Army have participated in a combined defensive cyber activity to enhance regional cybersecurity. Conducted in Manila, Philippines, the bilateral activity brought together Australian cyber warfare officers and specialists from the ADF’s Cyber Command and members from the Philippines Army Cyber and Network Enterprise Battalions to strengthen cyber defence, incident response, and network protection. Chief of Joint Operations, Vice Admiral Justin Jones, AO CSC RAN, said the activity strengthened Australia and the Philippines’ relationship across the cyber domain, building on the enduring relationships of land, air and maritime domains. “This is the first…
Gov. Tim Walz is defending his administration’s move to spend $430,000 on outside counsel to prepare for a congressional hearing centered on immigration policy last month. The DFL governor told reporters on Wednesday that his office contracted with law firm K & L Gates because its lawyers had more extensive expertise in immigration law than those already on the state payroll. The Minnesota Attorney General’s Office supported the decision to bring in additional counsel to prepare Walz for a June 12 House Oversight Committee hearing in Washington centered on so-called sanctuary states. New York Gov. Kathy Hochul and Illinois Gov.…
Proof-of-concept exploits have been released for a critical SQLi vulnerability in Fortinet FortiWeb that can be used to achieve pre-authenticated remote code execution on vulnerable servers. FortiWeb is a web application firewall (WAF), which is used to protect web applications from malicious HTTP traffic and threats. The FortiWeb vulnerability has a 9.8/10 severity score and is tracked as CVE-2025-25257. Fortinet fixed it last week in FortiWeb 7.6.4, 7.4.8, 7.2.11, and 7.0.11 and later versions. “An improper neutralization of special elements used in an SQL command (‘SQL Injection’) vulnerability [CWE-89] in FortiWeb may allow an unauthenticated attacker to execute unauthorized SQL code or commands…