Author: HackWatchit

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 45  |  Security Affairs newsletter Round 523 by Pierluigi Paganini – INTERNATIONAL EDITION  |  Ascension reveals personal data of 437,329 patients exposed in cyberattack  |  Operation Moonlander dismantled the botnet behind Anyproxy and 5socks cybercriminals services  |  A cyber attack briefly disrupted South African Airways operations  |  Cybercriminal services target end-of-life routers, FBI warns  |  Russia-linked ColdRiver used LostKeys malware in recent attacks  |  SonicWall fixed SMA 100 flaws that could be chained to execute arbitrary code  |  The LockBit ransomware site was breached, database dump was leaked online  |  Cisco fixed a critical flaw…

The Bluetooth Special Interest Group (SIG) has announced Bluetooth Core Specification 6.1, bringing important improvements to the popular wireless communication protocol. One new feature highlighted in the latest release is the increased device privacy via randomized Resolvable Private Addresses (RPA) updates. “Randomizing the timing of address changes makes it much more difficult for third parties to track or correlate device activity over time,” reads SIG’s announcement. A Resolvable Private Address (RPA) is a Bluetooth address created to look random and is used in place of a device’s fixed MAC address to protect user privacy. It allows trusted devices to securely…

This is the third article in our series AI at the Inflection Point — articles and podcasts from Google Cloud Next ’25 that detail how Google Public Sector partners with government to bring the best of AI and security to the mission. Cybersecurity. Cloud. Artificial intelligence. The interdependencies of these three technologies is helping public sector agencies anticipate and defend against new and ever more lurid threats to their sensitive data and to their operations. Agencies are addressing their increasing need for cloud and AI capabilities by adopting accredited commercial clouds. This move provides them with the latest technology essential for advanced…

When Windows 10 support ends on October 14, 2025, unpatched vulnerabilities will become permanent entry points for cybercriminals.After Windows 7 lost support, malware infections surged by 125%—Windows 10 users can expect a similar wave of attacks.In 2023, the average cost of a data breach hit $4.45 million, making outdated systems a massive financial liability.Running an unsupported OS can lead to compliance violations, higher cyber insurance costs, and legal risks for businesses.You’re making hackers’ jobs way too easy.October 14, 2025, should have a flashing red warning sign on your calendar. Why? That’s when Microsoft stops supporting Windows 10, cutting off security…

Podcast: Play in new window | DownloadSubscribe: Apple Podcasts | Spotify | Amazon Music | RSS Join John Strand as he continues his Attack Tactic series this time with the defense ideas for the attacks mentioned in episode 3 (see more here) To see the entire webcast visit the Active Countermeasures YouTube channel Blogs mentioned in this episode: Mike Felch’s Stealing 2FA Tokens on Red Teams with CredSniper Carrie Roberts’ Gathering Usernames from Google LinkedIn Results Using Burp Suite Pro Slides for reference: https://blackhillsinformationsecurity.shootproof.com/gallery/7324792/ Want to level up your skills and learn more straight from John himself?You can check out his…

Managing multiple AWS accounts in an organization can get complicated, especially when trying to understand how services and permissions are connected. The Account Assessment for AWS Organizations open-source tool helps simplify this process by giving you a central place to evaluate and manage all your accounts. Instead of manually reviewing resources across individual accounts, which can take hours, you can now run automated scans from a web-based interface. The tool helps you find things like which accounts are set up as delegated administrators, where identity- or resource-based policies are in use, and which AWS services have trusted access enabled for…

In March 2025, a critical vulnerability identified as CVE-2025-29927 was disclosed in Next.js, a popular React-based web framework. The flaw affects versions prior to 12.3.5, 13.5.9, 14.2.25, and 15.2.3. It stems from improper trust of the x-middleware-subrequest header, which is meant to prevent infinite middleware loops. By spoofing this header, attackers can bypass middleware logic entirely including authentication and authorization mechanisms thereby gaining unauthorized access to protected routes in vulnerable applications.Due to the widespread reliance on middleware in Next.js apps, the impact is significant. CVE ID: CVE-2025-29927 Severity: Critical CVSS Score: 9.1 EPSS Score: 92.56 Published: March 2025 Affected Versions:…

Marcello Salvati// During Red Team and penetration tests, it’s always important and valuable to test assumptions. One major assumption I hear from Pentesters, Red teamers and clients alike is that most networks (or their own network) block outbound SMB traffic. In my phishing payloads, I always try to inject a UNC path: If macros are disabled in the environment I’m targeting, I might still be able to grab the users Net-NTLM hash if that assumption proves to be incorrect. UNC path injection in Word documents is by far nothing new. Over the years there have been multiple blog posts on how to…

Communication Protocol), AI agents can collaborate freely across teams, frameworks, technologies, and organizations. It’s a universal protocol that transforms the fragmented landscape of today’s AI Agents into inter-connected team mates. This unlocks new levels of interoperability, reuse, and scale.As an open-source standard with open governance, ACP has just released its latest version, allowing AI agents to communicate across different frameworks and technology stacks. It’s part of a growing ecosystem, including BeeAI (where I’m part of the team), which has been donated to the Linux Foundation. Below are some key features; you can read more about the core concepts and details…