Author: HackWatchit

Google has released the September 2025 security update for Android devices, addressing a total of 84 vulnerabilities, including two actively exploited flaws. The two flaws that were detected as exploited in zero-day attacks are CVE-2025-38352, an elevation of privilege in the Android kernel, and CVE-2025-48543, also an elevation of privilege problem in the Android Runtime component. Google noted in its bulletin that there are indications that those two flaws may be under limited, targeted exploitation, without sharing any more details. The CVE-2025-38352 flaw is a Linux kernel flaw first disclosed on July 22, 2025, fixed in kernel versions 6.12.35-1 and later.…

five years, I left Brex in August. Time really flies. I joined Brex when it was three years old, and I can still vividly remember my first day. At the same time, those five years felt much longer. This is all due to the extensive knowledge I’ve gained along the way, from joining a young data team and learning the full data cycle, to collaborating with Operations, GTM, and Product, and eventually transitioning into management. This accelerated growth is one of the biggest benefits of joining a startup as a data scientist. “Shall I join a startup or a more…

In today’s rapidly evolving digital landscape, the challenges surrounding cybersecurity are growing exponentially. Industrial sectors, including energy, manufacturing, and utilities, are increasingly becoming targets for cyber threats, particularly as their reliance on Operational Technology (OT) and Industrial Control Systems (ICS) expands. As cyber threats become more sophisticated, traditional approaches to cybersecurity are proving insufficient to safeguard these critical infrastructures. To address these challenges, organizations are turning to digital twins and smart digital reality as innovative methods for cyber risk mitigation. While digital twinning has primarily been associated with asset management and operational efficiency, its role in cybersecurity is gaining attention…

Android droppers evolved into versatile tools to spread malware Pierluigi Paganini September 03, 2025 Android droppers now spread banking trojans, SMS stealers, and spyware, disguised as government or banking apps in India and Asia. ThreatFabric researchers warn of a shift in Android malware: dropper apps now deliver not just banking trojans, but also SMS stealers and spyware, mainly in Asia. Google’s Pilot Program enhances Play Protect by scanning Android apps before installation in high-risk regions like India and Brazil, blocking apps with risky permissions or suspicious APIs. Modern droppers exploit this system by appearing harmless at install, then fetching the…

BruteForceAI is a penetration testing tool that uses LLMs to improve the way brute-force attacks are carried out. Instead of relying on manual setup, the tool can analyze HTML content, detect login form selectors, and prepare the attack process automatically. It is built to mimic realistic human behavior while running multi-threaded attacks, which makes testing more effective and accurate. How BruteForceAI works The process starts with the AI analyzing the page to identify login fields. Once the selectors are mapped, the tool launches a targeted attack using that information. It supports both brute-force and password spray modes, while adding small…

Executive Summary Our research uncovered a fundamental flaw in the AI supply chain that allows attackers to gain Remote Code Execution (RCE) and additional capabilities on major platforms like Microsoft’s Azure AI Foundry, Google’s Vertex AI and thousands of open-source projects. We refer to this issue as Model Namespace Reuse. Hugging Face is a platform that enables AI developers to build, share and deploy models and datasets. On that platform, namespaces are the identifiers of models, which are Git repositories that are stored on the Hugging Face hub. Hugging Face models contain configurations, weights, code and information to enable developers…

In this episode of the podcast, host Paul Roberts connects with Noam Moshe, a lead vulnerability researcher at the firm Claroty about critical vulnerabilities he discovered in Axis IP cameras – a fixture of large corporations and sensitive government agencies. Discover how attackers could hijack entire fleets of cameras, manipulate video feeds, and pivot into sensitive networks—and what organizations must do to defend against these IoT and cyber-physical system threats. [Video Podcast] | [MP3] | [Transcript] One of the notable “cyber” trends we’ve seen the last decade is the broadening landscape of cyber attacks. Malicious campaigns these days target not…

Cybersecurity firms Cloudflare, Palo Alto Networks, and Zscaler on Tuesday confirmed that their Salesforce instances were hacked as part of the Salesforce-Salesloft Drift data theft campaign disclosed last week. Between August 8 and August 18, hackers used compromised OAuth tokens for the third-party AI chat bot Salesloft Drift to export large volumes of data from the Salesforce instances of hundreds of organizations. Attributed to a threat actor tracked as UNC6395 by Google and GRUB1 by Cloudflare, the campaign was aimed at extracting credentials and other sensitive information, including AWS access keys, passwords, and Snowflake-related access tokens. The campaign was disclosed…

Cybersecurity is not a “set it and forget it” affair. It requires continuous vigilance, adaptability, and a proactive approach to stay ahead of increasingly savvy cyber criminals capable of attacks that can cripple a company in many ways. Even in the absence of any recent attacks, no company should fall into a false sense of security. Instead, it should reinforce the importance of maintaining and fortifying its defenses, because when it comes to cyberattacks, it is not a matter of “if” but “when.” Every company must determine what information – including customer feedback, past attacks, performance data, and industry best…