Author: HackWatchit

Adobe said Monday (July 7) that during Amazon’s Prime Day sales event that runs from Tuesday (July 8) through Friday (July 11), it expects the amount of traffic to all U.S. retailers that comes from generative artificial intelligence (AI) chat services and browsers to leap 3,200% year over year. “And while AI-driven traffic remains modest compared to other channels such as paid search or email, the growth shows the value consumers are seeing in leveraging AI to quickly find information on deals and product details,” Vivek Pandya, director, Adobe Digital Insights at Adobe, said in a Monday blog post. Adobe…

“My phone’s been hacked!” These are words you never want to hear or say. Ever. You are not alone in this sentiment. Our phones have become the central hub of our lives, storing everything from personal and financial information, access to payment apps, files, photos, and contacts. This has made our phones irresistible, prized targets for cyber criminals. And because these devices are always on and always with us, the opportunity for attack is constant. What are the signs that you have been hacked and how can you reclaim your control? This guide walks you through the common indicators of a…

Executive Summary We recently discovered a large-scale campaign that has been compromising legitimate websites with injected, obfuscated JavaScript code. Threat actors commonly use this type of campaign to invisibly redirect victims from legitimate websites to malicious pages that serve malware, exploits and spam. The campaign uses a JavaScript obfuscation technique known as JSF*ck (profanity masked). Due to the profanity in the term, we refer to the method in the remainder of this article by using the nickname JSFireTruck. Our key findings are: Multiple websites have been identified with injected malicious JavaScript that uses JSFireTruck obfuscation, which is composed primarily of…

M&S confirmed today that the retail outlet’s network was initially breached in a “sophisticated impersonation attack” that ultimately led to a DragonForce ransomware attack. M&S chairman Archie Norman revealed this in a hearing with the UK Parliament’s Business and Trade Sub-Committee on Economic Security regarding the recent attacks on the retail sector in the country. While Norman did not go into details, he stated that the threat actors impersonated one of the 50,000 people working with the company to trick a third-party entity into resetting an employee’s password. “In our case the initial entry, which was on April the 17th, occured…

Italian police arrested a Chinese national suspected of cyberespionage on a U.S. warrant Pierluigi Paganini July 08, 2025 Italian police arrested a Chinese national linked to Silk Typhoon APT group at Milan’s Malpensa Airport on a U.S. warrant. Italian police arrested a Chinese national, Zewei Xu (33), at Milan’s Malpensa Airport on a U.S. warrant. Xu was arrested at Malpensa Airport on July 3rd after arriving on a flight from China. Authorities accused the man of cyberespionage, U.S. authorities linked him to the China-nexus group Hafnium (aka Silk Typhoon), which carried out attacks against U.S. government, including the US Treasury.…

Publicly Disclosed Zero-Day Vulnerability in Microsoft SQL Server CVE-2025-49719 is an Important information disclosure vulnerability affecting Microsoft SQL Server and has a CVSS score of 7.5. This vulnerability allows unauthenticated remote attackers to access sensitive information by exploiting improper input validation in SQL Server over a network connection. While the vulnerability has been publicly disclosed, there is no evidence of active exploitation in the wild. The vulnerability affects multiple SQL Server versions including SQL Server 2022, 2019, 2017, and 2016. When successfully exploited, attackers can gain access to uninitialized memory contents, potentially exposing sensitive data and compromising the confidentiality of…

Tosibox launched TosiANTA (Tosibox Advanced Network Traffic Analytics), a solution that redefines comprehensive OT network control for industrial organizations. Redefining control in an era of escalating threats Industrial organizations today face a cybersecurity crisis that demands a complete redefinition of network control. Recent industry data reveals that 73% of organizations experienced intrusions impacting OT systems in 2024, a 49% increase from 2023. With 83% of OT leaders reporting at least one security breach in the past three years and critical infrastructure experiencing over 420 million attacks between January 2023 and January 2024, traditional approaches to OT network management are failing.…

The newly formed SatanLock ransomware group has announced it is shutting down. Before disappearing, however, the group says it will leak all the data stolen from its victims later today. The announcement was made on the gang’s official Telegram channel and dark web leak site. It’s also worth noting that the group has deleted all victim listings that were visible just hours ago. Now, anyone visiting their .onion site sees a message reading, “SatanLock project will be shut down – The files will all be leaked today.” SatanLock Ransomware’s announcement (Image credit: Hackread.com) SatanLock has been active since early April…

Summer festival season is upon us, and music lovers are eagerly anticipating everything from The Weeknd tickets to intimate local music festivals. But while you’re dreaming of unforgettable performances, scammers are plotting to turn your concert and festival excitement into their profitable payday. The sobering reality? UK gig-goers lost over £1.6 million to ticket fraud in 2024 more than double the previous year’s losses. With approximately 3,700 gig ticket fraud reports made to Action Fraud in 2024, and almost half originating from social media platforms, the threat to festival-goers has never been greater. A Lloyds Bank analysis of scam reports…