Author: HackWatchit

Fake Qantas emails in a sophisticated phishing scam steal credit card and personal info from Australians, bypassing major email security filters. Australian airline Qantas is being targeted by criminals with fake emails claiming to be from the airline. Security experts at Cofense Intelligence, who discovered this attack, found that these convincing emails trick users into giving away their credit card information and personal information like phone numbers and addresses. These fake Qantas emails mimic real marketing emails, using the same colours, and layout as real ones and “with appropriate branding and functional links.” One clever trick the criminals used was to…

Security Affairs newsletter Round 522 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini May 04, 2025 A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. International Press – Newsletter Cybercrime Grinex Emerges as Likely Garantex Rebrand  Marks & Spencer breach linked to Scattered Spider ransomware attack Alleged Nemesis Market founder charged by federal grand jury with money laundering, drug distribution DarkWatchman cybercrime malware returns on Russian networks Emera and Nova Scotia Power…

Carrie Roberts //* I have needed to remind myself how to set up RDP access through an SSH connection so many times that I’ve decided to document it here for future reference. I hope it proves useful to you as well. I do “adversary simulation” for work and so I present this information using terms like “attacker” and “target” but this info is also useful for performing system administration tasks. The first scenario we will cover is the situation where you have access to a Linux machine on an Internal network and you want to RDP to a Windows machine…

Many enterprises believe their encryption is secure—until a new threat proves otherwise. Quantum computing and evolving cryptographic risks are forcing security teams to rethink their defenses before it’s too late. Cybercriminals are already harvesting encrypted data, storing it for future decryption as quantum computing capabilities evolve. Organizations must act now to safeguard sensitive data—before it’s too late. At the same time, encryption faces immediate challenges: TLS certificates are expiring faster than ever, certificate authority (CA) breaches are disrupting businesses, and cryptographic lifecycle management remains a weak point for many organizations. The question isn’t whether current encryption methods will hold—it’s how…

The Trump administration abruptly cancelled roughly $1 billion in federal grants aimed at helping schools hire and train therapists. Hundreds of funding recipients across the country received letters April 29 from the U.S. Department of Education informing them that their mental health programs violated civil rights laws. Some constituted an “inappropriate use of federal funds,” according to the letter. Read the rest of the story at USA Today News.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: RSAC 2025 ConferenceRSAC 2025 Conference took place at the Moscone Center in San Francisco. Check out our microsite for related news, photos, product releases, and more. Critical SAP NetWeaver flaw exploited by suspected initial access broker (CVE-2025-31324)CVE-2025-31324, a critical vulnerability in the SAP NetWeaver platform, is being actively exploited by attackers to upload malicious webshells to enable unauthorized file uploads and code execution. What’s worth automating in cyber hygiene, and what’s notCyber hygiene sounds simple. Patch your systems, remove old accounts, update your software. But…

Amid the changing cyber threat landscape, the manufacturing industry is dealing with increasing hostile threats and attacks. Ransomware, operational technology (OT) weaknesses, and state-sponsored hacking add even more concern to the already overwhelming threatening environment, jeopardizing the viability of business continuity systems and the safety across these critical environments. Furthermore, maintaining superior levels of production uptime during today’s high-demand conditions remains a cruel industry operational requirement known to challenge the most sophisticated systems. Dragos, an industrial cybersecurity firm, reported in February a staggering increase in ransomware-related threats, discovering 1,693 industrial firms with their sensitive data exposed on ransomware leak sites.…

Telegram game Notcoin kick-started last year’s tap-to-earn revolution that amassed hundreds of millions of players on the messaging app, but enthusiasm for the model has since dwindled following underwhelming token launches tied to increasingly overcomplicated schemes.Now, a year after Notcoin’s NOT token launch sparked the frenzy, the game’s founders believe that reinventing classic video games via its recently launched Not Games platform will prompt the next Telegram gaming boom.Sasha Plotvinov, co-founder of Notcoin, told Decrypt that he believes that demand for tap-to-earn games did not significantly increase after Notcoin’s release, even though the number of games on offer grew exponentially.…

Malicious websites are designed to harm you or your device. A malicious website might steal your data or infect your device with malware. For example, this can be through a phishing attack, a drive-by download, or browser hijacking. What’s particularly problematic is that malicious websites aren’t always easy to spot, often because they’re mimicking legitimate sites. This makes it that much easier for people to fall victim, sometimes without realising it. In this guide, we’ll explain what a malicious website is, the types of malicious websites that can be found online, and how malicious websites harm visitors. We’ll then take…