Author: HackWatchit

CrushFTP warned customers of an unauthenticated HTTP(S) port access vulnerability and urged them to patch their servers immediately. As the company also explained in an email sent to customers on Friday (seen by BleepingComputer), the security flaw enables attackers to gain unauthenticated access to unpatched servers if they are exposed on the Internet over HTTP(S). “Please take immediate action to patch ASAP. A vulnerability has been addressed today (March 21st, 2025). All CrushFTP v11 versions were affected. (No earlier versions are affected.) A CVE will be generated soon,” the company warned. “The bottom line of this vulnerability is that an…

Chicago Board Options Exchange (Cboe) filed on March 25 to trade a spot Solana (SOL) exchange-traded fund (ETF) issued by Fidelity through the registration of a 19b-4 form. The move comes four days after Fidelity registered a Solana fund in Delaware.As of Dec. 31, Fidelity registered $5.9 trillion in assets under management, making it the third-largest asset manager in the world. The firm also registers the second-largest inflows from spot Bitcoin (BTC) and Ethereum (ETH) ETFs traded in the US, amassing nearly $13 billion per Farside Investors’ data.Notably, the move comes five days after the first SOL-related ETFs started trading in…

It started with a single password: the login to a secure Wi-Fi network that a high school teacher shared with a student. That student passed it along to another, then another, until the credentials spread amongst a group of friends. At first, it seemed like a minor policy violation—a teacher who shared her login credentials trying to be helpful, and students sharing access. Until it wasn’t.   One student decided to test whether the same credentials worked elsewhere. Shockingly, they did. The teacher had reused her password across multiple systems, including one that contained sensitive student records. With those same…

Android malware campaigns use .NET MAUI to evade detection Pierluigi Paganini March 25, 2025 Researchers warn of a new Android malware that uses .NET MAUI to mimic legit services and evade detection. McAfee researchers warn of Android malware campaigns using .NET MAUI to evade detection. These threats disguise themselves as legitimate services to steal sensitive information from users. .NET MAUI (Multi-platform App UI) is a cross-platform framework by Microsoft for building native mobile and desktop applications using C#. It allows developers to create apps that run on Android, iOS, Windows, and macOS from a single codebase, streamlining development and maintenance.…

ORIGINALLY AIRED ON FEBRUARY 21, 2022 Articles discussed in this episode: 02:36 – Story # 1: Massive cyberattack takes Ukraine military, big bank websites offline – https://www.theregister.com/2022/02/15/ukraine_cyberattack/ 04:26 – Story # 2: The Elite Hackers of the FSB – https://interaktiv.br.de/elite-hacker-fsb/en/index.html 07:47 – Story # 3: Exclusive: FBI Braces for Russian Cyber Attacks in US as Ukraine Tensions Rise – https://www.newsweek.com/exclusive-fbi-warns-russia-may-launch-cyber-attacks-us-ukraine-tensions-rise-1681012 18:22 – Story # 4: Microsoft Defender will soon block Windows password theft –https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-will-soon-block-windows-password-theft/ 22:28 – Story # 5: Dad takes down town’s internet by mistake to get his kids offline – https://www.bleepingcomputer.com/news/technology/dad-takes-down-towns-internet-by-mistake-to-get-his-kids-offline/ 28:50 – Story # 6: Akamai acquires…

Researchers from Sygnia have responded to a stealthy and persistent China-linked threat actor targeting a major telecommunications company in Asia. The Sygnia data highlights Weaver Ant, a China-based group infiltrating the telecom provider using web shells and tunneling to maintain access and conduct cyber espionage. The investigation revealed that a variant of the China Chopper web shell had compromised an internal server for several years. The remediation of the initial threat actor inadvertently disrupted the operations of a second China-linked group, also tracked by Sygnia as Weaver Ant.  “Based on our analysis, we assess that the group behind this intrusion—tracked…

The recent bankruptcy filing by 23andMe isn’t just another financial crisis – it’s a stark warning for the cyber security community. When a company entrusted with immutable, sensitive genetic data collapses, it forces us to reexamine how we protect data assets that can never be “reset.” This development should serve as a catalyst for organizations to prioritize robust data protection measures. The Cyber Security Stakes of Immutable Data In today’s threat landscape, data breaches are often viewed as isolated events – something you recover from by changing a password or canceling a credit card. However, genetic data is fundamentally different.…

Mass layoffs and weak leadership are taking a severe toll on the US government’s cyber defense agency, undermining its ability to protect America from foreign adversaries bent on crippling infrastructure and ransomware gangs that are bleeding small businesses dry. Inside the Cybersecurity and Infrastructure Security Agency, vital support staff are gone, international partnerships have been strained, and workers are afraid to discuss threats to democracy that they’re now prohibited from countering. Employees are even more overworked than usual, and new assignments from the administration are interfering with important tasks. Meanwhile, CISA’s temporary leader is doing everything she can to appease President Donald Trump,…

Wiz researchers have unearthed several critical vulnerabilities affecting Ingress NGINX Controller for Kubernetes (ingress-nginx) that may allow attackers to take over Kubernetes clusters. “Based on our analysis, about 43% of cloud environments are vulnerable to these vulnerabilities, with our research uncovering over 6,500 clusters, including Fortune 500 companies, that publicly expose vulnerable Kubernetes ingress controllers’ admission controllers to the public internet—putting them at immediate critical risk,” the researchers noted. The “IngressNightmare” vulnerabilities Ingress NGINX Controller for Kubernetes – not to be confused with F5’s NGINX Ingress Controller – is a widely used open source controller for managing network traffic in…