Author: HackWatchit

A set of 57 Chrome extensions with 6,000,000 users have been discovered with very risky capabilities, such as monitoring browsing behavior, accessing cookies for domains, and potentially executing remote scripts. These extensions are ‘hidden,’ meaning they don’t show up on Chrome Web Store searches, nor do search engines index them, and can only be installed if the user has the direct URL. Typically, such extensions are private software like internal company tools or add-ons still under development. Still, threat actors might be using them to evade detection while aggressively pushing them through ads and malicious sites. Risky Chrome extensions The…

Disney Plus is available in most countries, so you’re unlikely to have trouble accessing it regardless of location. The problem is that not every country can access the same content library. If you’re traveling abroad on vacation, then you can no longer access your home version of Disney+, which may mean certain TV shows and movies are no longer available to stream. This is why many streamers turn to using a VPN to watch Disney+. With a VPN or Virtual Private Network, you can spoof your online location by connecting to a server back home. This can help you sidestep geographic…

Node.js malvertising campaign targets crypto users Pierluigi Paganini April 17, 2025 Microsoft warns of a malvertising campaign using Node.js to deliver info-stealing malware via fake crypto trading sites like Binance and TradingView. Microsoft has observed Node.js increasingly used in malware campaigns since October 2024, including an ongoing crypto-themed malvertising attack as of April 2025. Threat actors are increasingly using Node.js to deploy malware, shifting from traditional scripts like Python or PHP. Node.js allows attackers to blend malicious code with legitimate apps, bypass security tools, and persist in systems. Node.js is an open-source, cross-platform JavaScript runtime environment that allows JavaScript code…

The Cybersecurity and Infrastructure Security Agency has inked a last-minute funding extension for a key cyber vulnerability management program. CISA’s contract with MITRE to manage the Common Vulnerabilities and Exposures, or CVE, program was set to expire on Wednesday. But after an outcry from the cybersecurity community, CISA executed an 11-month option period for MITRE’s contract on Tuesday night. “The CVE program is invaluable to the cyber community and a priority of CISA,” a CISA spokesperson said on Wednesday. “Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services.…

Researchers reveal a large-scale ransomware campaign leveraging over 1,200 stolen AWS access keys to encrypt S3 buckets. Learn how attackers used SSE-C silently and the key takeaways for cloud security. Researchers have uncovered a security incident concerning Amazon Web Services (AWS). According to Cybernews’ report, shared with Hackread.com, ransomware attacks are being launched using 1,200 unique AWS access keys. Administrators using AWS S3 buckets (a type of cloud storage offered by AWS) find their files locked with a ransom note left behind. Researchers reportedly discovered a database with over 158 million AWS secret key records, including 1,229 unique login credentials with “an…

This is a joint webcast between Black Hills Information Security and the Wild West Hackin’ Fest conference. We hate ransomware. Like a lot. This is because we feel this is the future of cyber attacks. If you look at the recent cases and the newish versions that involve extortion, there is nothing to like. Well, almost nothing. In this webcast, we cover what you can do to prepare (trust us, we have a newish twist on this) and what you can do to mitigate the damage. We also talk about working with brokers. There will be lots of memes to…

Modern websites are under constant pressure from automated traffic: scraping, credential stuffing, inventory hoarding, and other malicious bot behaviors. While Cloudflare Bot Management is a powerful cloud-native solution that leverages massive data and machine learning, not every organization wants to rely on a cloud proxy. For teams seeking data autonomy, self-hosted control, and enterprise-grade protection, SafeLine offers a compelling alternative. Cloudflare Bot Management: Cloud power with centralized control Cloudflare manages around 20% of all global Internet traffic, giving it vast visibility into bot behavior. Its Bot Management platform is designed for effortless deployment, using machine learning models trained on billions…

Zoom, the widely popular video conferencing platform used by millions of IT professionals, educators, and businesses worldwide, has recently experienced a significant outage. The disruption, which affected users trying to access the service via the app and website, has sparked widespread concerns. Initial reports suggest that the downtime was caused by a massive Denial-of-Service (DDoS) cyber-attack targeting the platform’s servers. The attack is believed to be global in nature, as a social media post from the hacking group Dark Storm claims responsibility for the attack. According to Dark Storm, the group infiltrated Zoom’s servers, leading to the temporary service interruption…

Coinbase-backed Layer-2 network Base is under fire from the crypto community after promoting a so-called “Content Coin” that lost nearly all its value shortly after launch.The controversy began on April 16 when Base shared a tokenized version of its “Base is for Everyone” post on Zora, a decentralized content-sharing platform, through its official X account.This attracted swift and widespread attention to the token despite a disclaimer on Zora clearly stating the coin wasn’t linked to Coinbase or Base and warned buyers not to expect returns.Nevertheless, many crypto investors interpreted the promotion on X as an official endorsement.Due to this, the…