Author: HackWatchit

A new report details how the advanced hacking tool Shellter Elite was leaked and is now being used by cybercriminals. Learn about its evasion techniques and the infostealer campaigns. Shellter Elite, a sophisticated tool for cybersecurity professionals, has fallen into the wrong hands, with its leaked copy being actively used by cybercriminals. This disclosure comes after security researchers at Elastic Security Labs identified its use in widespread attacks, leading to the deployment of several notorious infostealers. This research was shared with Hackread.com. For your information, Shellter Elite is a specialised program intended for ethical hackers, also known as red teams…

In this Help Net Security interview, Thijs Povel, Managing Partner at Ventures.eu, discusses how the firm evaluates emerging technologies through the lens of defense and resilience. He explains how founders from both defense and adjacent sectors are addressing policy shifts, procurement cycles, and dual-use innovation. Povel also offers guidance for founders on handling slow-moving procurement cycles and proving the business case for resilience solutions. How do you differentiate between defense-adjacent and non-lethal tech when evaluating companies? The distinction between defense-adjacent and non-lethal tech has become increasingly blurred with the rise of dual-use technologies. What we do is evaluate based on…

In general, malware aimed at Androids rose 151% in February and March but a whopping increase came with the 692% jump in SMS-based malware that occurred in April and May.  The post Spyware on Androids Soars  appeared first on Security Boulevard.

In brief House Democrats are split on how to approach several votes on crypto legislation set for next week. Some are intent on vocally tying the bills to President Trump’s personal crypto ventures and perceived conflicts of interest. Other Democrats are likely to support the legislation, but in lesser numbers than last year, when a similar bill passed the House. House Republicans, supported by the White House, are barrelling forward with a slew of crucial votes on digital assets legislation set for next week—and Democrats appear unsure of how to approach “Crypto Week” with a unified front. Next week, among other…

In 2018, an assistant legal attaché with the FBI was meeting with sensitive sources in Mexico City. The attaché was working the high-profile “El Chapo” drug cartel case. As the attaché traveled the streets of Mexico City, a hacker working for the cartel was watching their every move. The hacker had compromised the attaché’s cell phone and was able to see their phone calls, as well as their geolocation data. The hacker also accessed Mexico City’s camera system, using it to follow the attaché through the city and identify who they met with. The cartel used that information to intimidate…

, I walked you through setting up a very simple RAG pipeline in Python, using OpenAI’s API, LangChain, and your local files. In that post, I cover the very basics of creating embeddings from your local files with LangChain, storing them in a vector database with FAISS, making API calls to OpenAI’s API, and ultimately generating responses relevant to your files. 🌟 Image by author Nonetheless, in this simple example, I only demonstrate how to use a tiny .txt file. In this post, I further elaborate on how you can utilize larger files with your RAG pipeline by adding an…

New Kaspersky research revealed that since early March 2025, detections of Batavia spyware have increased across Russian organizations. The malicious files, named договор-2025-5[dot]vbe, приложение[dot]vbe, and dogovor[dot]vbe (translated as ‘contract’ and ‘attachment’), were observed targeting employees at multiple entities. The victims of the campaign were primarily Russian industrial enterprises. “The targeted attack begins with bait emails containing malicious links, sent under the pretext of signing a contract,” the researchers detailed in a Monday blog post. “The campaign began in July 2024 and is still ongoing at the time of publication. The main goal of the attack is to infect organizations with…

The gambling firms Paddy Power and BetFair have suffered a data breach, after “an unauthorised third party” gained access to “limited betting account information” relating to up to 800,000 of their customers. What was exposed? Usernames, email addresses, IP addresses. However, parent company Flutter says “no passwords, ID documents or usable card or payment details were impacted”. The word “usable” might be doing some heavy-lifting there, I wonder if some partial payment card details were exposed… Email sent to affected customers of Paddy Power An obvious threat is phishing attacks, targeting Betfair and Paddy Power customers – perhaps posing as…

Cybersecurity researchers discovered a vulnerability in McHire, McDonald’s chatbot job application platform, that exposed the chats of more than 64 million job applicants across the United States. The flaw was discovered by security researchers Ian Carroll and Sam Curry, who found that the ChatBot’s admin panel utilized a test franchise that was protected by weak credentials of a login name “123456” and a password of “123456”. McHire, powered by Paradox.ai and used by about 90% of McDonald’s franchisees, accepts job applications through a chatbot named Olivia. Applicants can submit names, email addresses, phone numbers, home addresses, and availability, and are…