Author: HackWatchit

Fortinet warns that threat actors use a post-exploitation technique that helps them maintain read-only access to previously compromised FortiGate VPN devices even after the original attack vector was patched. Earlier this week, Fortinet began sending emails to customers warning that their FortiGate/FortiOS devices were compromised based on telemetry received from FortiGuard devices. These emails were titled “Notification of device compromise – FortiGate / FortiOS – ** Urgent action required **,” given a TLP:AMBER+STRICT designation.  “This issue is not related to any new vulnerability. This file was left behind by a threat actor following exploitation of previous known vulnerabilities,” the emails…

Organizations across the world are facing mounting pressures to comply with a complex web of regulations. Failure to meet these requirements doesn’t just result in inconvenience or minor setbacks – it can translate into significant financial and reputational damage. According to a recent study, the average cost for organizations that fail to comply with data protection regulations is $14.82 million, a staggering 45 percent increase from 2011. This number reveals a sharp increase in both the scale and complexity of regulatory violations, and the harsh reality that non-compliance is a costly risk many companies cannot afford to take. In comparison, the…

Remote work is seen as more than a temporary solution, it’s a long-term strategy for many organizations. Remote work cybersecurity challenges Unsecured networks: Workers often operate from home or public Wi-Fi networks that don’t have the security features of corporate environments. Bring Your Own Device (BYOD): Personal devices are frequently used for work, but these devices may not have the same security protections as company-issued ones. They often lack up-to-date software, antivirus protection, and can be shared with family members, increasing the risk of malware and unauthorized access. Phishing and social engineering attacks: The remote work environment makes employees more…

Attackers are exploiting recently disclosed OttoKit WordPress plugin flaw Pierluigi Paganini April 12, 2025 Threat actors are exploiting a vulnerability in the OttoKit WordPress plugin, a few hours after public disclosure. Threat actors are exploiting a recently discovered vulnerability, tracked as CVE-2025-3102 (CVSS score of 8.1) in the OttoKit WordPress plugin (formerly SureTriggers), a few hours after public disclosure. An attacker can trigger the vulnerability to create malicious administrator users when the plugin is not configured with an API key. Exploiting the flaw lets attackers fully take over a WordPress site, upload malicious plugins, alter content, serve malware or spam, and redirect visitors to malicious websites. “The…

Originally aired on December 11, 2020 Articles discussed in this episode: Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-What-You-Can Training Available live/virtual and on-demand

Industrial technology company Sensata Technologies disclosed that the company experienced a ransomware attack that encrypted parts of its network. The company took its systems offline, initiated response protocols, and launched an investigation with third-party cybersecurity experts. Law enforcement has been notified and is involved. This comes as several U.S. states have recently disclosed cyber incidents affecting critical government services, including Arizona, Arkansas, Idaho, Nebraska, and Oregon. “On April 6, 2025, Sensata Technologies Holding plc (the “Company”) experienced a ransomware incident that has encrypted certain devices in the Company’s network,” Richard Siedel, vice president and chief accounting officer at the Massachusetts…

is co-authored by Felipe Bandeira, Giselle Fretta, Thu Than, and Elbion Redenica. We also thank Prof. Carl Scheffler for his support. Introduction Parameter estimation has been for decades one of the most important topics in statistics. While frequentist approaches, such as Maximum Likelihood Estimations, used to be the gold standard, the advance of computation has opened space for Bayesian methods. Estimating posterior distributions with Mcmc samplers became increasingly common, but reliable inferences depend on a task that is far from trivial: making sure that the sampler — and the processes it executes under the hood — worked as expected. Keeping…

Hackers, Builders, Industry Experts… This is your final boarding call for the #blockchain Writing Contest brought to you by Aleph Cloud and HackerNoon. The countdown is on: Submissions close May 7, 2025. So, if you’ve been sitting on an idea, or are just now hearing about this great opportunity, now’s the time to put pen to paper (or fingers to keys) and write for your shot at $2,000 in prizes.What’s the #blockchain Writing Contest About? We’re highlighting how decentralized tech interacts with technology scaling, data storage, and operations. Contest sponsor, Aleph Cloud, is a Web3 Supercloud built on hundreds of…

TL;DR: A critical deserialization vulnerability (CVSS 9.8 – CVE-2025-27520) in BentoML (v1.3.8–1.4.2) lets attackers execute remote code without authentication. Upgrade to v1.4.3 immediately. WAF workaround is limited. A critical security vulnerability has been identified in BentoML, a widely used Python framework for building and running AI-powered online services. This vulnerability, tracked as CVE-2025-27520 with a high severity score of 9.8 and discovered by GitHub user c2an1, could allow attackers who aren’t even logged in to take complete control of the servers running these AI services. While the initial security advisory from NIST suggested versions 1.3.4 through 1.4.2 were vulnerable, Checkmarx…