Author: HackWatchit
Chinese APT Weaver Ant infiltrated a telco in Asia for over four years Pierluigi Paganini March 24, 2025 China-linked APT Weaver Ant infiltrated the network of a telecommunications services provider for over four years. The China-linked threat actor Weaver Ant infiltrated the network of a telecom provider in Asia for over four years. During a forensic investigation, Sygnia researchers observed multiple alerts that revealed a re-enabled threat actor account by a service account from an unidentified server. Further analysis uncovered a China Chopper web shell on an internal server, compromised for years. This led to the discovery of Weaver Ant’s…
ORIGINALLY AIRED ON MARCH 28, 2022 Articles discussed in this episode: 01:42 – Suspected Okta hackers arrested by British police – https://www.reuters.com/world/uk/british-police-say-seven-people-arrested-after-okta-hack-2022-03-24/ 11:16 – A Closer Look at the LAPSUS$ Data Extortion Group – https://krebsonsecurity.com/2022/03/a-closer-look-at-the-lapsus-data-extortion-group/ 14:04 – Anonymous Starts ‘Huge’ Data Dump That Will ‘Blow Russia Away,’ Leaks Rostproekt Emails – https://www.ibtimes.com/anonymous-starts-huge-data-dump-will-blow-russia-away-leaks-rostproekt-emails-3452789 22:28 – Most Severe’ Cyberattack Since Russian Invasion Crashes Ukraine Internet Provider – https://www.forbes.com/sites/thomasbrewster/2022/03/28/huge-cyberattack-on-ukrtelecom-biggest-since-russian-invasion-crashes-ukraine-telecom/?sh=72d14c297dc2 27:53 – Man linked to multi-million dollar ransomware attacks gets 66 months in prison for online fraud – https://www.zdnet.com/article/man-linked-to-multi-million-dollar-ransomware-attacks-gets-66-months-in-prison-for-online-fraud/ 34:17 – Greece’s national postal service restoring systems after ransomware attack – https://therecord.media/greeces-national-postal-service-restoring-systems-after-ransomware-attack/ 37:02 –…
How aware are you that your personal information could be bought and sold without your consent—and that there are companies whose entire business model revolves around this? So, these companies, called data brokers, collect everything they can about you – where you shop, what you search online, even stuff from public records – and then sell it to other companies, mostly for ads. The real problem lies in the lack of transparency since most people have no idea how data brokers collect, use, or store their personal information. Unauthorized sharing of personal data can result in identity theft, financial fraud,…
California-based genetic testing provider 23andMe has filed for Chapter 11 bankruptcy and plans to sell its assets following years of financial struggles. 23andMe has been providing direct-to-consumer DNA testing services since November 2007 to customers who send a saliva sample and receive a report on their ancestry and genetic predispositions. Since then, 23andMe has sold over 15 million DNA testing kits. The company said in a Sunday press release that it will not change how it stores, manages, or protects customer data. In a Monday filing with the U.S. Securities and Exchange Commission (SEC), it also “filed a motion seeking authorization…
When you think of malware, your mind probably jumps to malicious downloads or email attachments. But it turns out, some pretty innocent-looking devices can also be used as sneaky vectors for malicious software. Here are five surprising gadgets that could become malware delivery systems, and how to protect yourself. 1. Headphones and Speakers Yes, you read that right! Your trusty headphones or speakers could spread malware. This isn’t about plugging them into an infected device but rather using them to transmit data through sound waves. Researchers have demonstrated how malware can convert audio output devices into ultrasonic transmitters. In one…
The collapse of genetic testing giant 23andMe has raised serious privacy concerns for millions of people who shared their DNA with the company. Once valued at $6 billion, the company has filed for bankruptcy and is now selling off assets—including, potentially, your genetic data. If you’ve ever used 23andMe to explore your ancestry or health traits, now is the time to take action. Here’s what’s going on, what it means for your data, how to delete your account, and steps you can take to better protect your online privacy going forward. What’s Going On at 23andMe? 23andMe, once a…
Estimates among experts vary on the timetable for the arrival of “Q-Day” – the day when quantum computers are powerful enough to crack current encryption protocols. However, one thing most experts agree on is that the era of quantum computing is coming sooner rather than later. Google’s recent introduction of a new quantum chip called Willow marked a significant advancement toward commercially viable quantum computing. Google heralded Willow as bringing the world “closer to running practical, commercially-relevant algorithms that can’t be replicated on conventional computers.” As this breakthrough accelerates the arrival of quantum computing, it creates a clear imperative for enterprises to…
ORIGINALLY AIRED ON APRIL 4, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Blame it on the Intern 06:24 – Spring Time for Java – https://www.darkreading.com/application-security/zero-day-vulnerability-discovered-in-java-spring-framework 09:10 – GitLab for Account Access – https://www.bleepingcomputer.com/news/security/critical-gitlab-vulnerability-lets-attackers-take-over-accounts/ 10:33 – No Passwords for Okta – https://www.bleepingcomputer.com/news/security/sitel-on-okta-breach-spreadsheet-did-not-contain-passwords/ 11:11 – Legacy Networks for Okta – https://therecord.media/sitel-blames-okta-breach-on-legacy-network-from-acquisition/ 12:40 – Lawsuit for Ubiquity – https://arstechnica.com/tech-policy/2022/03/ubiquiti-sues-journalist-alleging-defamation-in-coverage-of-data-breach/ 17:01 – MITRE AT&T&CK for EDMs 21:17 – Breach for Mailchimp – https://www.bleepingcomputer.com/news/security/hackers-breach-mailchimps-internal-tools-to-target-crypto-customers/ 30:54 – 15 Characters for John – https://blog.pcisecuritystandards.org/pci-dss-v4-0-a-conversation-with-the-council 40:17 – Data Requests for Apple – https://www.macrumors.com/2022/03/30/apple-user-data-forged-legal-requests/ 46:52 – Drones for Ukraine – https://www.forbes.com/sites/davidhambling/2022/03/08/how-small-drones-could-win-the-fight-in-ukraines-cities-and-the-truth-about-that-anti-drone-pickle-jar-story We are self-publishing free…
Jupyter AI brings generative AI capabilities right into the interface. Having a local AI assistant ensures privacy, reduces latency, and provides offline functionality, making it a powerful tool for developers. In this article, we’ll learn how to set up a local AI coding assistant in JupyterLab using Jupyter AI, Ollama and Hugging Face. By the end of this article, you’ll have a fully functional coding assistant in JupyterLab capable of autocompleting code, fixing errors, creating new notebooks from scratch, and much more, as shown in the screenshot below. Coding assistant in Jupyter Lab via Jupyter AI | Image by Author…