Author: HackWatchit

A maximum severity remote code execution (RCE) vulnerability has been discovered impacting all versions of Apache Parquet up to and including 1.15.0. The problem stems from the deserialization of untrusted data that could allow attackers with specially crafted Parquet files to gain control of target systems, exfiltrate or modify data, disrupt services, or introduce dangerous payloads such as ransomware. The vulnerability is tracked under CVE-2025-30065 and has a CVSS v4 score of 10.0. The flaw was fixed with the release of Apache version 1.15.1. It should be noted that to exploit this flaw, threat actors must convince someone to import a…

Transnational cybersecurity agencies published on Thursday a joint cybersecurity advisory warning organizations, internet service providers (ISPs), and cybersecurity service providers of the ongoing threat of Fast Flux-enabled malicious activities and guide detection and mitigations to safeguard critical infrastructure and national security. The technique is used to obfuscate the locations of malicious servers through rapidly changing Domain Name System (DNS) records associated with a single domain name, and the threat exploits a gap commonly found in network defenses, making the tracking and blocking of malicious fast flux activities difficult. Government and critical infrastructure organizations should close this ongoing gap in many…

A hacker, previously linked to the Tracelo breach, now claims to have breached Twilio’s SendGrid, leaking and selling data on 848,000 customers, including contact and company info. A hacker using the alias Satanic is claiming responsibility for what could be a major breach involving SendGrid, a cloud-based email delivery platform owned by Twilio. According to a post made earlier today, Thursday, April 3, 2025, on Breach Forums, a popular cybercrime platform, Satanic is offering the allegedly stolen data for $2,000 and has shared a sample to support the claim. In the post, the hacker stated: “We would like to announce…

not the only person who feels that YouTube sponsor segments have become longer and more frequent recently. Sometimes, I watch videos that seem to be trying to sell me something every couple of seconds. , it sure is annoying to be bombarded by ads.  In this blog post, I will explore these sponsor segments, using data from a popular browser extension called SponsorBlock, to figure out if the perceived increase in ads actually did happen and also to quantify how many ads I’m watching. I will walk you through my analysis, providing code snippets in Sql, DuckDB, and pandas. All…

Jason Covert, one of attorneys representing Xiaofeng Wang and his wife, Nianli Ma, a library systems analyst whose employee profile was also removed by Indiana University, tells WIRED that Wang and Ma are both “safe” and that neither of them have been arrested. Their legal team is not currently aware of any pending criminal charges against them, and while the couple’s attorneys have viewed a search warrant from the Department of Justice, Covert says they have not received a copy of the affidavit establishing probable cause.Wang is considered among the top researchers in the field of privacy, data security, and…

China-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-March Pierluigi Paganini April 03, 2025 Ivanti addressed a critical remote code execution flaw in Connect Secure, which has been exploited since at least mid-March 2025. Ivanti released security updates to address a critical Connect Secure remote code execution vulnerability tracked as CVE-2025-22457. The vulnerability has been exploited by a China-linked threat actor since at least mid-March 2025. Ivanti did not disclose details about the attack, however cybersecurity experts at Mandiant and Google Threat Intelligence Group (GTIG) linked the exploration attempts to an alleged China-linked cyberespionage group tracked as UNC5221. The vulnerability…

Building a phishing engagement is hard. While the concept is straightforward, real-world execution is tricky. Being successful takes enormous amounts of up-front setup and knowledge in quickly evolving phishing tactics. While there is always a need to craft a custom email, the most considerable amount of work is setting up an infrastructure to make it all work. Wouldn’t it be nice if you had a playbook of how to set everything up to save time and prevent mistakes? What if we coded this playbook so we could share this with others and modify our tactics when things change? In this…

A suspected Chinese APT group has exploited CVE-2025-22457 – a buffer overflow bug that was previously thought not to be exploitable – to compromise appliances running Ivanti Connect Secure (ICS) 22.7R2.5 or earlier or Pulse Connect Secure 9.1x. The vulnerability was patched by Ivanti in ICS 22.7R2.6, released on February 11, 2025. But, apparently, the threat actor studied the patch and “uncovered through a complicated process, [that] it was possible to exploit 22.7R2.5 and earlier to achieve remote code execution,” Mandiant (Google) incident responders have revealed. “Mandiant and Ivanti have identified evidence of active exploitation in the wild against ICS…

What if artificial intelligence could step into a company’s codebase, understand its intricacies, and churn out production-ready front-end code in minutes—without human oversight? That’s the question AutonomyAI aims to answer as it emerges from stealth mode in New York, backed by $4 million in pre-seed funding. Investors like Inbound Capital, Gilad Shany of IoN Partners, and Vikram Makhiija from Google Cloud Security have placed their bets on this startup, which promises to shift how businesses approach software development. At a time when AI’s role in coding is expanding, AutonomyAI’s launch sparks curiosity about whether autonomous agents can truly transform an…