Author: HackWatchit
Can wifi owner see what sites I visit? Quick answer? Yes. Whether you’re using your phone on home wifi, public wifi, or at work, your online activity could be tracked. Even if you use incognito mode, the wifi owner (network administrator) could access router logs to monitor the domain names you visit. Network metadata includes all connected devices, which apps you use, and how much data is transferred during each session. The good news? Wifi bills don’t show your browsing history. Despite the HTTPS encryption websites use to protect your data, wifi owners can still monitor the URLs you visit.…
New AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor. Pierluigi Paganini May 29, 2025 GreyNoise researchers warn of a new AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor. GreyNoise discovered the AyySSHush botnet has hacked over 9,000 ASUS routers, adding a persistent SSH backdoor. “Using an AI powered network traffic analysis tool we built called SIFT, GreyNoise has caught multiple anomalous network payloads with zero-effort that are attempting to disable TrendMicro security features in ASUS routers, then exploit vulnerabilities and novel tradecraft in ASUS AiProtection features on those routers.” states GreyNoise. The threat…
Key Findings: The takedown achieved a significant disruption to Lumma infostealers’ infrastructure, but likely didn’t permanently affect most of its Russia-hosted infrastructure. Lumma’s developers are undertaking significant efforts to reinstate the activity and to conduct business as usual. There seems to be a significant reputational damage to the Lumma infostealer, and the key factor for the infostealer to resume regular activity will be the reputational factors (rather than the technological). On May 21, 2025, Europol, FBI, and Microsoft, in collaboration with other public and private sector partners, announced an operation to dismantle the activity of the Lumma infostealer. The malware,…
PALO ALTO, California, May 29th, 2025, CyberNewsWire Today, SquareX released new threat research on an advanced Browser-in-the-Middle (BitM) attack targeting Safari users. As highlighted by Mandiant, adversaries have been increasingly using BitM attacks to steal credentials and gain unauthorized access to enterprise SaaS apps. BitM attacks work by using a remote browser to trick victims into interacting with an attacker-controlled browser via a pop-up window in the victim’s browser. A common BitM attack involves displaying the legitimate login page of an enterprise SaaS app, deceiving victims into divulging credentials and other sensitive information thinking that they are conducting work on…
were making headlines last week. In Microsoft’s Build 2025, CEO Satya Nadella introduced the vision of an “open agentic web” and showcased a newer GitHub Copilot serving as a multi-agent teammate powered by Azure AI Foundry. Google’s I/O 2025 quickly followed with an array of Agentic Ai innovations: the new Agent Mode in Gemini 2.5, the open beta of the coding assistant Jules, and native support for the Model Context Protocol, which enables more smooth inter-agent collaboration. OpenAI isn’t sitting still, either. They upgraded their Operator, the web-browsing agent, to the new o3 model, which brings more autonomy, reasoning, and…
@1iJax aka The Security Viking// Just when you think the drum has been beaten loudly enough for long enough, a quick survey of organizations across the spectrum will find many companies still just “don’t get it”. No, this is not an exhaustive list, there is only so much we can fit on one post. If you’re an executive or member of management, and you’re having trouble getting a security program going, or you really have no clue if you have an effective program, please read on. If you’re a Security Pro that feels something isn’t right at your organization, and…
IT management software firm ConnectWise says a suspected state-sponsored cyberattack breached its environment and impacted a limited number of ScreenConnect customers. “ConnectWise recently learned of suspicious activity within our environment that we believe was tied to a sophisticated nation state actor, which affected a very small number of ScreenConnect customers,” ConnectWise shared in a brief advisory. “We have launched an investigation with one of the leading forensic experts, Mandiant. We have contacted all affected customers and are coordinating with law enforcement.” ConnectWise is a Florida-based software company that provides IT management, RMM (remote monitoring and management), cybersecurity, and automation solutions…
The National Threat Assessment Center, or NTAC, released its latest publication, First Baptist Church of Sutherland Springs: A Case Study on the Link Between Domestic Violence and Mass Attacks, April 23. It examines the link between domestic violence and mass attacks by delving into the deadly 2017 shooting at the First Baptist Church of Sutherland Springs in Texas. A 26-year-old shooter killed 26 people November 5, 2017, including his wife’s grandmother, and injured another 22 churchgoers during a rampage just outside San Antonio, Texas. It was the deadliest mass shooting in Texas history. For years before the attack, the shooter engaged…
BTCC, founded in 2011, is one of the oldest cryptocurrency exchanges still operating today. With 14 years of history, it has weathered bull runs, bear markets, regulatory battles, and the rise and fall of several major competitors. As the company approaches its 14th anniversary, Dan Liu steps in as CEO with deep experience in research, risk strategy, and global finance. A veteran in the crypto industry since 2013, Dan previously served as BTCC’s Chief Research Officer. In this exclusive interview with HackerNoon’s Behind the Exchange series, we sit down with Dan Liu to discuss BTCC’s longevity, user-first innovation, response to…