Author: HackWatchit
U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 27, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Citrix NetScaler flaw, tracked as CVE-2025-7775, to its Known Exploited Vulnerabilities (KEV) catalog. This week, Citrix addressed three security flaws (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424) in NetScaler ADC and NetScaler Gateway, including one (CVE-2025-7775) that it said has been actively exploited in the wild. “Exploits of CVE-2025-7775 on unmitigated appliances have been observed.” reads the advisory. Below is the description for these vulnerabilities: CVE-2025-7775 (CVSS score:…
A recent report from Check Point Research uncovered Zipline, a phishing campaign that fuses subtle, patient social engineering with stealthy in-memory malware, together enabling attackers to slip past traditional defences and manipulate human behaviour on a wide scale. How did they do it, and who was targeted? A typical phishing attack relies on unsolicited emails, but Zipline, on the other hand, flipped the script completely. The attackers instead used a company’s own “Contact Us” web form, prompting a reply from the target. If successful, this marks the beginning of multiple professional email exchanges spanning several weeks, filled with…
A new report from Anthropic shows how criminals are using AI to actively run parts of their operations. The findings suggest that AI is now embedded across the full attack cycle, from reconnaissance and malware development to fraud and extortion. The report is based on real cases where Anthropic’s models were misused. It provides an unusual view into how attackers are adapting and building AI into every stage of their operations. While the focus is on Anthropic’s own model, the cases reflect a broader shift that applies across advanced AI systems. AI as an active operator One of the most…
A self-proclaimed leader of an online group linked to the violent extremist network The Com tells WIRED he is responsible for the flurry of hoax active-shooter alerts at universities across the US in recent days as students return to school.Known online as Gores, the person says he coleads a group called Purgatory, which is offering its followers a menu of services, including hoax threats against schools—known as swatting—for just $20, while faked threats against hospitals, businesses, and airports can cost up to $50. The group also offered “slashings” and “brickings” for as little as $10, according to a review of…
Beth Hyland never imagined love would cost her $26,000. At 53, she considered herself cautious and financially aware. But when she matched with someone calling himself “Richard Dobb”, the whirlwind connection, late-night conversations, and promises of a future together felt genuine. What she didn’t realize was that she was being drawn into one of the most devastating and personal scams out there—romance fraud. The Beginning of the Scam Beth and Richard’s connection quickly escalated. They weren’t “officially” engaged, but in her mind, they were planning a future together. Richard told her he had just completed a project in Qatar and…
In a significant step to secure the defense industrial base (DIB), the Department of Defense (DoD) has officially released the long-anticipated Cybersecurity Maturity Model Certification (CMMC) Final Rule, which was released October 15, 2024, and will go into effect on December 16, 2024. This development marks a critical milestone for businesses working within the DoD’s supply chain, especially those handling Controlled Unclassified Information (CUI) or Federal Contract Information (FCI). The CMMC Final Rule outlines the cybersecurity requirements companies must meet to qualify for and maintain their eligibility for DoD contracts. As cyber threats continue to grow more sophisticated, the DoD…
Today, I’m excited to announce CrowdStrike’s agreement to acquire Onum, a leader in real-time telemetry pipeline management that will extend the CrowdStrike Falcon® platform’s data advantage. Onum delivers the real-time data architecture to transform data in motion into high-fidelity intelligence, fueling CrowdStrike Falcon® Next-Gen SIEM and powering the agentic SOC. This is a pivotal step forward in our mission to stop breaches. Security teams today face a data crisis: Exploding volumes of security and IT telemetry are difficult to collect, normalize, route, and act on. Legacy SIEMs built on batch and post-storage enrichment can’t keep up with the deluge. Analysts…
Cross-domain solutions (CDS) consist of the secure exchange of information between security domains. This type of solution, which emerged as a technological answer to the need to share data between segregated or classified networks, has seen a sharp rise in demand due to its growing application in military command and control systems and critical infrastructure protection. The rise in digitalization has made modern societies highly dependent on the availability of digital infrastructure in strategic sectors, and there is a movement towards taking the protection mechanisms offered by this type of solutions and applying them in these areas. The organization of…
Microsoft warns that a threat actor tracked as Storm-0501 has evolved its operations, shifting away from encrypting devices with ransomware to focusing on cloud-based encryption, data theft, and extortion. The hackers now abuse native cloud features to exfiltrate data, wipe backups, and destroy storage accounts, thereby applying pressure and extorting victims without deploying traditional ransomware encryption tools. Storm-0501 is a threat actor who has been active since at least 2021, deploying the Sabbath ransomware in attacks against organizations worldwide. Over time, the threat actor joined various ransomware-as-a-service (RaaS) platforms, where they used encryptors from Hive, BlackCat (ALPHV), Hunters International, LockBit, and, more recently,…