Author: HackWatchit
This post continues Behind the Tap, a series exploring the hidden mechanics of everyday tech — from Uber to Spotify to search engines. I’ll dive under the hood to demystify the systems shaping your digital world. first relationship with music listening started at 6, rotating through the albums in the living room’s Onkyo 6-disc player. Cat Stevens, Groove Armada, Sade. There was always one song I kept rewinding to, though I didn’t know its name. 10 years on, moments of the song returned to memory. I searched through forums, ‘old saxophone melody’, ‘vintage song about sand dunes’, looking for years with no…
The global AI race is in full swing, and its battleground? HuggingFace It took eight years for the platform to reach 1 million models, but only 9 months later, this figure will likely double (1.8 million at the time of writing). Model providers of all origins – public and private, domestic and foreign, trusted and unverified – are leveraging the open-source platform to reach developers directly, creating a deluge of state-of-the-art AI for countless domains (including cybersecurity). With an open-source AI supply chain comes AI supply chain risks, as mentioned in our February discussion on the three pillars of this…
U.S. CISA adds MRLG, PHPMailer, Rails Ruby on Rails, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 08, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Multi-Router Looking Glass (MRLG), PHPMailer, Rails Ruby on Rails, and Synacor Zimbra Collaboration Suite (ZCS) flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Multi-Router Looking Glass (MRLG), PHPMailer, Rails Ruby on Rails, and Synacor Zimbra Collaboration Suite (ZCS) flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2014-3931 (CVSS score: 9.8) Multi-Router Looking Glass…
France’s cybersecurity agency ANSSI uncovered last September a campaign exploiting multiple zero-day flaws in Ivanti Cloud Service Appliance devices to breach French networks. The attackers targeted critical sectors, from government and telecom to media, finance, and transport. ANSSI attributed the campaign to a unique intrusion set it calls ‘Houken,’ describing it as moderately sophisticated and marked by an ambivalent use of resources. “While its operators use zero-day vulnerabilities and a sophisticated rootkit, they also leverage a wide number of open-source tools, mostly crafted by Chinese-speaking developers. Houken’s attack infrastructure is made up of diverse elements, including commercial VPNs and dedicated…
Researchers have released proof-of-concept (PoC) exploits for a critical Citrix NetScaler vulnerability, tracked as CVE-2025-5777 and dubbed CitrixBleed2, warning that the flaw is easily exploitable and can successfully steal user session tokens. The CitrixBleed 2 vulnerability, which affects Citrix NetScaler ADC and Gateway devices, allows attackers to retrieve memory contents simply by sending malformed POST requests during login attempts. This critical flaw is named CitrixBleed2 as it closely resembles the original CitrixBleed (CVE-2023-4966) bug from 2023, which was exploited by ransomware gangs and in attacks on governments to hijack user sessions and breach networks. In technical analyses first released by watchTowr…
Executive Summary Unit 42 researchers uncovered a campaign by an initial access broker (IAB) to exploit leaked Machine Keys — cryptographic keys used on ASP.NET sites — to gain access to targeted organizations. IABs breach organizations and then sell that access to other threat actors. This report analyzes the tools used in these attacks. We track this actor as the temporary group TGR-CRI-0045. The group seems to follow an opportunistic approach but has attacked organizations in Europe and the U.S. in the following industries: financial services, manufacturing, wholesale and retail, high technology, and transportation and logistics. The IAB used these…
ParrotOS, known for its emphasis on security, privacy, and development, is widely used by cybersecurity professionals and enthusiasts alike. Version 6.4 delivers a host of updates and community-driven enhancements. The update is expected to be the final release in the 6.x branch. The developers describe ParrotOS 6.4 as a culmination of feedback from its active user community, as well as the result of contributions from new developers who have joined the project. Key tool updates include newer versions of Metasploit, Sliver, Caido, and Empire, which are core components for penetration testing and red teaming. The release also brings a more…
Human trafficking and child exploitation are crises that strike at the core of our society, threatening the most vulnerable among us. Despite the countless efforts to pass laws, train law enforcement officers, and develop new technologies, meaningful progress remains frustratingly elusive. The hard truth is that waiting for external solutions – whether through legal reforms, technological breakthroughs, or additional resources for law enforcement – will not resolve these deeply rooted problems. These issues are too complex and widespread to be resolved by any single institution or solution. The responsibility to protect our children and communities ultimately falls on us—on parents,…
A sophisticated cyber espionage operation, believed to be run by a group known as APT36 (also called Transparent Tribe), is now targeting Indian defence personnel and organizations. This Pakistan-based group is targeting systems running BOSS Linux (Bharat Operating System Solutions), an Indian Linux distribution based on Debian commonly used by Indian government agencies. This shows a new step in their attacks since they’re now using malicious software designed specifically for Linux environments. This threat was reported by cybersecurity firm Cyfirma, and the findings were shared with Hackread.com. Cyfirma researchers first observed this new attack on June 7, 2025. As per…