Author: HackWatchit
Threat actors have been using multiple websites promoted through Google ads to distribute a convincing PDF editing app that delivers an info-stealing malware called TamperedChef. The campaign is part of a larger operation with multiple apps that can download each other, some of them tricking users into enrolling their system into residential proxies. More than 50 domains have been identified to host deceiving apps signed with fraudulent certificates issued by at least four different companies. The campaign appears to be widespread and well-orchestrated as the operators waited for the ads to run their course before activating the malicious components in…
WatchTowr Labs uncovers a zero-day exploit (CVE-2025-54309) in CrushFTP. The vulnerability lets hackers gain admin access via the web interface. Update to v10.8.5 or v11.3.4. A zero-day vulnerability in CrushFTP, a widely used file transfer server, is being actively exploited by hackers. Cybersecurity firm watchTowr Labs discovered the active exploitation of this flaw, tracked as CVE-2025-54309. The vulnerability was added to the CISA Known Exploited Vulnerabilities Catalogue on July 22, 2025, confirming its critical status. watchTowr Labs’ investigation revealed a critical threat to over 30,000 online instances of the software. In its official statement, CrushFTP confirmed that the vulnerability had…
of this series [1], [2], and [3], we have observed: interpretation of multiplication of a matrix by a vector, the physical meaning of matrix-matrix multiplication, the behavior of several special-type matrices, and visualization of matrix transpose. In this story, I want to share my perspective on what lies beneath matrix inversion, why different formulas related to inversion are the way they actually are, and finally, why calculating the inverse can be done much more easily for matrices of several special types. Here are the definitions that I use throughout the stories of this series: Matrices are denoted with uppercase (like…
The recent widespread data theft campaign that hit hundreds of Salesforce customers through their Salesloft Drift integration also impacted organizations using Google Workspace, Google Threat Intelligence Group (GTIG) says. Carried out between August 8 and August 18, 2025, the campaign relied on compromised OAuth tokens for the third-party AI chat bot Salesloft Drift to export large amounts of data from corporate Salesforce instances, likely for credential harvesting, GTIG warned on August 26. The attackers were seen searching for AWS access keys, passwords, Snowflake-related access tokens, and other sensitive information. GTIG attributed the campaign to a threat actor tracked as UNC6395.…
The Evolving Landscape of Physical Security Okay, so physical security isn’t just about burly guards and big fences anymore, is it? It’s kinda gone all high-tech. Traditional physical security is morphing into a more connected, digital world, blurring the lines between physical and it infrastructures. Think about it, everything from cameras that use ai to smart locks are now connected. iot devices are now vital for physical security, but they also bring new risks. Consider hospitals using smart badges for access, or retail stores using networked cameras to track customer behavior and, prevent theft. This means physical and it security…
When it comes to rapidly scaling operational processing power and expanding digital storage, cloud platform solutions are unmatched. Offering unparalleled flexibility, cloud platforms have quickly become essential for businesses of all sizes. However, as with any technological innovation, the cloud introduces a range of complex security risks that organizations must carefully navigate. While most enterprises rely on cloud services from providers like AWS, Azure and GCP, implementing strong internal security measures is a key requirement for maintaining regulatory compliance. These protections are essential not only for safeguarding customer data but also for preserving consumer trust, employee confidence, competitive advantage and…
Google: Salesloft Drift breach hits all integrations Pierluigi Paganini August 29, 2025 Google warns that Salesloft Drift OAuth breach affects all integrations, not just Salesforce. All tokens should be treated as compromised. Google disclosed that the Salesloft Drift OAuth breach is broader than Salesforce, affecting all integrations. GTIG and Mandiant advise all customers to treat connected tokens as compromised. Attackers used stolen OAuth tokens to access some Google Workspace emails on August 9, 2025, via the Drift Email integration. Google stressed this was not a compromise of Workspace itself, and only accounts integrated with Salesloft were at risk, with no…
In brief Dutch and U.S. authorities shut down VerifTools, a major fake ID marketplace that generated $6.4 million selling counterfeit documents for as little as $9 in crypto. The operation seized 23 servers from one of the largest international providers of fraudulent identity documents. Modern fake IDs use sophisticated technology like holograms and UV ink, making them nearly indistinguishable from genuine documents. Dutch and American law enforcement have shuttered online fake ID marketplace VerifTools, which sold counterfeit documentation for as little as $9 in cryptocurrency.According to a press release published Thursday, Dutch cybercrime police gained control of two physical data…
As students returned to school this week, WIRED spoke to a self-proclaimed leader of a violent online group known as “Purgatory” about a rash of swattings at universities across the US in recent days. The group claims to have ties to the loose cybercriminal network known as The Com, and the alleged Purgatory leader claimed responsibility for calling in hoax active-shooter alerts.Researchers from multiple organizations warned this week that cybercriminals are increasingly using generative AI tools to fuel ransomware attacks, including real situations where cybercriminals without technical expertise are using AI to develop the malware. And a popular, yet enigmatic,…