Author: HackWatchit

Affirm and Shopify have expanded their pay-later offering beyond U.S. borders. The companies announced Wednesday (April 9) that Shopify merchants in Canada who have signed up for early access can begin offering the Affirm-powered Shop Pay Installments program, marking its first availability outside the U.S.  “We’re thrilled to launch Shop Pay Installments in early access to Canada as our first step beyond the U.S.,” Kaz Nejatian, Shopify’s chief operating officer, said in a news release.  “Our partnership with Affirm expands our global reach, giving shoppers the flexibility to pay over time, and drives higher conversion rates for merchants worldwide.” According…

It is another year for the Sacred Cash Cow Tipping Webcast. For those of you who are new to our email list within the past year, this is a webcast where we cover the various tools and techniques that Black Hills Information Security (BHIS) uses to bypass endpoint security protections. The point of this webcast is not so much to teach people how to bypass these products, but rather to show that they can be bypassed. Hopefully, this leads to some conversations about defense-in-depth and how many vendors exaggerate their capabilities. We also discuss how simply writing signatures for specific strains of…

Microsoft says the RansomEXX ransomware gang has been exploiting a high-severity zero-day flaw in the Windows Common Log File System to gain SYSTEM privileges on victims’ systems. The vulnerability, tracked as CVE-2025-29824, was patched during this month’s Patch Tuesday and was only exploited in a limited number of attacks. CVE-2025-29824 is due to a use-after-free weakness that lets local attackers with low privileges gain SYSTEM privileges in low-complexity attacks that don’t require user interaction. While the company has issued security updates for impacted Windows versions, it delayed releasing patches for Windows 10 x64 and 32-bit systems and said they would…

A critical RCE vulnerability (CVE-2025-30406) affecting the Gladinet CentreStack file-sharing/remote access platform has been added to CISA’s Known Exploited Vulnerabilities catalog on Tuesday. According to the vulnerability’s entry in NIST’s National Vulnerability Database, the flaw has been leveraged in attacks since March 2025. About CVE-2025-30406 CentreStack is a platform that allows managed service providers (MSPs) to offer cloud-like file services to their customers: file sharing, backup, collaboration, and remote access. CVE-2025-30406 is a deserialization vulnerability caused by the CentreStack portal’s hardcoded machineKey use. “The application uses a hardcoded or improperly protected machineKey in the IISweb.config file, which is responsible for…

PoisonSeed Campaign uses stolen email credentials to spread crypto seed scams and and empty wallets Pierluigi Paganini April 07, 2025 A campaign named PoisonSeed uses stolen CRM and bulk email credentials to send crypto seed scams, aiming to empty victims’ digital wallets. Silent Push researchers warn of a malicious PoisonSeed campaign that uses stolen CRM and bulk email provider credentials to send crypto seed phrase spam. Victims are tricked into importing compromised seed phrases into wallets, allowing attackers to drain funds. The scheme mimics security steps to mislead users into self-compromising. “PoisonSeed threat actors are targeting enterprise organizations and individuals…

RunSafe Security, a vendor of cyberhardening technology for embedded systems across critical infrastructure, announced on Monday the launch of its newest innovation, the RunSafe Risk Reduction Analysis, which analyzes total exposure to Common Vulnerabilities and Exposures (CVEs) and memory-based zero days in software. Designed for cybersecurity professionals and embedded systems developers, the solution provides much-needed insight into system vulnerabilities as well as data on how runtime mitigations can drastically reduce software exposure. Critically, the RunSafe Risk Reduction Analysis, part of the company’s Identify solution, focuses on the identification and mitigation of memory-based vulnerabilities, which are one of the most exploited…

Edward Miro // Backdoors & Breaches is now available as an official Workshop Mod for Tabletop Simulator! Backdoors & Breaches (B&B) contains 52+ unique cards to help you conduct incident response tabletop exercises and learn attack tactics, tools, and methods. This post is a guide for getting a virtual B&B game going. Note: New attack, defense. and inject cards will be added periodically. This is a multi-step process, but it’s not difficult. Our mod is built with Tabletop Simulator (TTS) and is hosted on the TTS Workshop. TTS runs on the Steam Platform. Note: this guide is designed for Windows…

In today’s increasingly digital world, concerns about the safety and security of personal and corporate data are paramount. With high-profile incidents in the media, terms like “data breach” and “data leak” are often used interchangeably. However, there are significant differences between the two, each with unique implications for businesses and individuals. Understanding these differences is crucial for responding effectively to these incidents and protecting sensitive information. What is a Data Breach? A data breach refers to an intentional or unintentional incident where unauthorized individuals or entities gain access to sensitive or confidential data. The key aspect of a data breach…

Key Findings Between December 2024 and February 2025 (“the reporting period”), ReliaQuest analyzed customer incidents, detection trends, and threat actor behavior to reveal key attacker techniques and emerging malware trends. In this report, we frame these findings within the broader threat landscape, providing real-world case studies, actionable recommendations to defend against similar attacks, and predictions for what lies ahead. The attacks analyzed in this report are typically carried out by financially motivated actors. Our insights are relevant across industries, highlighting how these attackers deliberately probe for defense weaknesses and prey on organizations struggling to keep up with the ever-increasing pace…