Author: HackWatchit

A Chainlink price feed’s alleged malfunction led to more than $500,000 in liquidations on May 29, sparking fresh debate over the reliability of oracles in DeFi.According to reports, Chainlink’s price oracle for the deUSD stablecoin inaccurately reported its value at $1.03. The incorrect data triggered liquidations for users holding deUSD-denominated debt on Avalanche’s Euler Finance lending protocol.The impact was severe, especially for those leveraging the asset, which is backed by real-world assets (RWAs) and known for its high-yield potential.deUSD, issued by Elixir, has a total supply of $185 million, with $42.7 million circulating on Avalanche. Due to its yield profile,…

The Microsoft Authenticator app is now issuing notifications warning that the password autofill feature is being deprecated in July, suggesting users move to Microsoft Edge instead. Microsoft Authenticator is a free mobile authenticator app that provides secure sign-in for mobile accounts using multi-factor authentication (MFA) methods like time-based one-time passwords (TOTPs), push notifications, biometrics-based confirmations, and password-less logins to Microsoft accounts. Earlier this month, BleepingComputer reported about the upcoming deprecation, which warned that users had until August 1 to export their passwords before they become unavailable in the app. Today, the Microsoft Authenticator app began issuing notifications about the upcoming changes,…

Zscaler this week revealed it is acquiring Red Canary, a provider of a managed detection and response (MDR) service that will be incorporated into the portfolio of offerings delivered via a zero-trust cloud platform for accessing applications.Expected to close in August, Red Canary MDR service has been mainly adopted by security operations center (SOC) teams looking to combine behavioral analytics and artificial intelligence (AI) to identify and remediate cybersecurity threats.Zscaler CEO Jay Chaudhry, during a call with industry analysts, said Zscaler opted to acquire Red Canary because it fits well with a data fabric platform designed specifically for cybersecurity workflows…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), working in coordination with the Australian Signals Directorate’s Australian Cyber Security Centre and a coalition of international and U.S. cybersecurity partners, published a new set of resources aimed at guiding organizations through the process of procuring and implementing Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) technologies. The release includes executive-level recommendations that explore how senior leaders can strategically integrate SIEM and SOAR capabilities into their broader cybersecurity posture. The guidance stresses the value of increasing visibility across network environments and outlines how enhanced detection and response…

Phishing scams used to be filled with awkward wording and obvious grammar mistakes. Not anymore. AI is now making it harder to distinguish what is real. According to Cofense, email-based scams surged 70% year over year, driven by AI’s ability to automate lures, spoof internal conversations, and bypass spam filters with subtle text variations. Criminals use AI algorithms to analyze large amounts of data to understand the interests, behavior, and preferences of their target. For this purpose, they use specialized tools such as FraudGPT, which can be found on underground channels. Unlike the popular ChatGPT, it is devoid of any…

John Strand// ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. Hello all in Arizona! Just wanted to let you know that I am coming down for SANS Mesa: https://www.sans.org/event/phoenix-mesa-2017/course/hacker-techniques-exploits-incident-handling And, I will be doing an evening talk at the brand spankin new Cyber Warfare Range Tuesday the 10th of October from 6-7. I will be presenting some new/cool cyber deception…

Traditionally, trust came from centralized institutions. Banks, payment networks, and clearinghouses are closed systems. Users cannot see the inner workings, but they rely on external audits, government regulation, and long histories of compliance to feel secure. It’s a model that has and continues to work, but it comes with trade-offs, namely: opacity, concentration of power, and limited innovation. A new model of trust With blockchains and decentralized applications (dApps), a new model of trust has emerged: one that doesn’t require trusting institutions but instead trusts the code itself. And this is only possible because of a founding principle: open source.…

The FortiGuard Incident Response Team has released a detailed investigation into a newly discovered malware that managed to quietly operate on a compromised Windows machine for several weeks. What makes this malware different from others is its deliberate corruption of its own DOS and PE headers, a method designed to obstruct forensic analysis and reconstruction efforts by security researchers. Despite this challenge, Fortinet’s team successfully obtained a memory dump of the live malware process, housed in a dllhost.exe process (PID 8200), along with a complete 33GB memory dump of the compromised system. By carefully replicating the compromised environment, Fortinet’s researchers…

Crooks use a fake antivirus site to spread Venom RAT and a mix of malware Pierluigi Paganini May 28, 2025 Researchers found a fake Bitdefender site spreading the Venom RAT by tricking users into downloading it as antivirus software. DomainTools Intelligence (DTI) researchers warn of a malicious campaign using a fake website (“bitdefender-download[.]com”) spoofing Bitdefender’s Antivirus for Windows download page to trick visitors into downloading a remote access trojan called Venom RAT. “A malicious campaign using a fake website to spread VenomRAT, a Remote Access Trojan (RAT), is detailed in this analysis. The malware includes tools for password theft and stealthy access.”…