Author: HackWatchit
Researchers at EclecticIQ assess with high confidence that, in April 2025, China-nexus nation-state APTs (Advanced Persistent Threats) launched high-tempo exploitation campaigns targeting critical infrastructure networks. These operations focused on SAP NetWeaver Visual Composer, leveraging CVE-2025-31324, an unauthenticated file upload vulnerability that allows remote code execution (RCE). The assessment is supported by evidence from a publicly exposed directory (opendir) on attacker-controlled infrastructure, which contained detailed event logs documenting activity across multiple compromised systems. The analysts link observed SAP NetWeaver intrusions to Chinese cyber-espionage units, including UNC5221, UNC5174, and CL-STA-0048, based on threat actor tradecraft patterns. EclecticIQ analysts assess with high confidence…
Ivanti fixed two EPMM flaws exploited in limited attacks Pierluigi Paganini May 14, 2025 Ivanti addressed two Endpoint Manager Mobile (EPMM) software vulnerabilities that have been exploited in limited attacks. Ivanti has released security updates to address two vulnerabilities in Endpoint Manager Mobile (EPMM) software. The company confirmed that threat actors have chained the flaws in limited attacks to gain remote code execution. The two vulnerabilities are tracked as CVE-2025-4427 and CVE-2025-4428, below are their description: CVE-2025-4427 (CVSS score: 5.3) – An authentication bypass in Endpoint Manager Mobile allowing attackers to access protected resources without proper credentials. CVE-2025-4428 (CVSS score: 7.2) – A remote code execution…
2 Jul 2018 Red Team, Red Team Tools, Webcasts hacker tools, Microsoft, webcast, webcasts David Fletcher & Sally Vandeven// Join David “Fletch” and Sally as they explore the cornucopia of wonderful, free tools in the SysInternals Suite that conveniently are signed by Microsoft and that they use on a daily basis to hack their customers. Slides are available here: https://blackhillsinformationsecurity.shootproof.com/gallery/6973715/ Offensive SPF: How to Automate Anti-Phishing Reconnaissance Using Sender Policy Framework PODCAST: Hacker Tools, Compliments of Microsoft Looking For Something?Browse by category Select Category Alyssa Snow (7) Ashley Knowles (1) Ashley Van Hoesen (1) Author (402) Backdoors & Breaches (7) Beau Bullock (32) Ben Bowman (4) Ben…
In this Help Net Security interview, Kim Crawley, cybersecurity expert and Professor at the Open Institute of Technology, discusses her upcoming book Digital Safety in a Dangerous World, which will feature her expert advice, as well as insights from other cybersecurity experts, lawyers, and activists, on how to lawfully protect your safety and privacy in challenging times. What inspired you to write Digital Safety in a Dangerous World, and how does it differ from your previous works? My data, devices, and digital life matter to me. By pushing GenAI, tech giants are trying to take control. I can think and…
In this Help Net Security video, Divya Mohan, Principal Technology Advocate at SUSE, discusses how Kubernetes has firmly transitioned from an emerging technology into a core part of enterprise production environments. A new survey from SUSE highlights the latest adoption patterns, challenges and priorities. Key highlights from the survey: 1. Production workloads are now Kubernetes-native: Nearly 40% of respondents now run all their production workloads on Kubernetes, with an additional 31% leveraging it for pre-production environments. 2. The shift toward scalable, streamlined development: Users value Kubernetes for its ability to scale effortlessly (31%) and streamline development cycles (38%). As a…
Don’t get duped, doxxed, or drained! In this episode of “Smashing Security” we dive into the creepy world of sextortion scams, and investigate how crypto wallet firm Ledger’s Discord server was hijacked in an attempt to phish for cryptocurrency recovery phrases. All this and more is discussed in the latest edition of the award-winning “Smashing Security” podcast by computer security veterans Graham Cluley and Carole Theriault. Plus! Don’t miss our featured interview with Drata’s Matt Hillary. Warning: This podcast may contain nuts, adult themes, and rude language. Hosts: Graham Cluley: @grahamcluley.com @[email protected] Carole Theriault: @caroletheriault Episode links: Sponsored by: Drata –…
In today’s online world, scams are everywhere—and they’re harder to spot than ever. From sophisticated phishing texts and deepfake videos to emails that look just like messages from your bank or delivery provider, scammers are constantly evolving. And so are we. Introducing McAfee’s Scam Detector: advanced scam detection technology built to spot and stop scams across text messages, emails, and videos. It’s included at no extra cost in all core McAfee plans for customers in the U.S., UK, and Australia—helping millions stay safer online without having to upgrade. Why We Built Scam Detector Scam messages are getting smarter and more…
Flashpoint uncovers how North Korean hackers used fake identities to secure remote IT jobs in the US, siphoning $88 million. Find out how they used fake identities and technology to commit the fraud. North Korean hackers used stolen identities to get remote IT jobs at US companies and non-profits, raking in at least $88 million over six years. The US Department of Justice indicted fourteen North Korean nationals on December 12, 2024, for their involvement. Security firm Flashpoint conducted a unique investigation, analysing data from the hackers’ own infected computers to uncover their tactics and exclusive details on this scheme.…
In brief Users have flagged the Elon Musk-backed chatbot Grok for injecting “white genocide” claims into unrelated responses. The AI has blamed the issue on a programming glitch that overemphasized trending topics. Grok has previously drawn criticism from both right-wing users and misinformation researchers. Grok was in the crosshairs on Wednesday after users flagged the AI chatbot, backed by Elon Musk, repeatedly inserted references to the debunked “white genocide” narrative in South Africa, even in replies to unrelated questions.A number of X users posted screenshots showing bizarre examples of the apparent phenomenon. In one, a user asked Grok to confirm…