Author: HackWatchit

WhatsApp fixed zero-day flaw used to deploy Paragon Graphite spyware Pierluigi Paganini March 20, 2025 WhatsApp fixed a zero-click, zero-day vulnerability used to install Paragon’s Graphite spyware on the devices of targeted individuals. WhatsApp has addressed a zero-click, zero-day vulnerability exploited to install Paragon’s Graphite spyware on the devices of targeted individuals. WhatsApp blocked a spyware campaign by Paragon targeting journalists and civil society members after reports of the Citizen Lab group from the University of Toronto. The company confirmed that the issue was fixed in December 2024 without a client-side update, and no CVE-ID was assigned. In February, Meta…

Bitcoin surged past $86,800 on Wednesday, climbing nearly 5% as investors responded to signals of looser financial conditions from the Federal Reserve and growing expectations of a liquidity-driven rally.The Fed announced that it would slow the pace of reducing its $6.8 trillion balance sheet, capping the runoff of Treasury securities at $5 billion per month, down from $25 billion. The move aims to prevent disruptions in funding markets amid ongoing debt ceiling tensions. The central bank also left interest rates unchanged in the 4.25% to 4.5% range, maintaining its projection for two rate cuts later this year despite persistent inflation concerns.Easier financial…

Bengaluru, India, March 19th, 2025, CyberNewsWire Moving Beyond Detection to Real-Time, Automated Security Across Workloads, Cloud, and Infrastructure  SecPod, a global cybersecurity provider, has announced the General Availability of Saner Cloud, a Cloud-Native Application Protection Platform designed to provide automated remediation and workload security across multi-cloud environments. Unlike conventional security solutions that focus primarily on detection, Saner Cloud integrates security using AI-driven automation to remediate threats in real-time. Security teams have long faced challenges managing disparate security solutions across cloud workloads, IT infrastructure, and endpoints, often resulting in fragmented operations and a high volume of unresolved alerts. Saner Cloud is…

A message posted on Monday to the homepage of the U.S. Cybersecurity & Infrastructure Security Agency (CISA) is the latest exhibit in the Trump administration’s continued disregard for basic cybersecurity protections. The message instructed recently-fired CISA employees to get in touch so they can be rehired and then immediately placed on leave, asking employees to send their Social Security number or date of birth in a password-protected email attachment — presumably with the password needed to view the file included in the body of the email. The homepage of cisa.gov as it appeared on Monday and Tuesday afternoon. On March…

moth // I’ve been diving deep into Linux lately, with my latest kick being exploring the Linux kernel. I’ve found “The Linux Programming Interface” (TLPI) by Michael Kerrisk, among others, to be a fantastic reference manual that covers the application of system calls (syscalls). For a quick primer on Linux syscalls, check out the introductory Linux manual page on the subject by using the man 2 intro command in a terminal (or viewing the page online). While reading through TLPI, I found myself yearning for a deeper exploration into the implementations of the syscalls themselves. To that end, I’ve lately…

A new Windows zero-day vulnerability is being actively exploited by at least 11 hacking groups linked to nation-states including North Korea, Iran, Russia, and China for years. Despite evidence of widespread attacks dating back to 2017, Microsoft has declined to issue a security patch, labelling the issue as “not meeting the bar for servicing.” The vulnerability, tracked by Trend Micro as ZDI-CAN-25373, allows attackers to execute malicious code on Windows systems by hiding commands within shortcut (.lnk) files. When Trend Micro submitted proof of this vulnerability through their Zero Day Initiative bug bounty program, Microsoft categorized it as low severity…

Vanta announced a series of new features and capabilities to help security and GRC teams seamlessly collaborate across their organization and extended network. These releases—including team-based collaboration and granular user access, an integrated Vanta Exchange for vendor security reviews, enhanced audit capabilities and expanded security questionnaire automation—reduce manual processes and enable companies to manage trust as a team. With 65% of businesses reporting that customers, investors and suppliers increasingly require proof of compliance, maintaining a strong security posture is essential for growth and unlocking new market entry. Vanta’s new features simplify delegation, improve contextual communication and ensure accountability, allowing security…

A Transportation Security Administration (TSA) officer at Savannah Hilton Head International Airport (SAV) played a critical role in preventing a potential in-flight disaster after identifying an intoxicated pilot attempting to pass through security. At approximately 5:50 a.m., TSA Lead Officer Sergio Carino, stationed at the Known Crewmember® (KCM) checkpoint—an entry designated for airline personnel—noticed unusual behavior from a pilot. The pilot attempted to avoid speaking and emitted a strong smell of alcohol, raising immediate concerns. Carino promptly alerted his supervisor, who escalated the matter to airport management and Savannah Airport Police. Officers later conducted a field sobriety test at the…

Though 2024 may be behind us, many of the security threats and vulnerabilities that organizations faced last year remain. The CrowdStrike Professional Services Red Team tracks them all in its efforts to defend organizations against adversaries. The three most common exploitation paths we encountered were:  Unsecured Credentials: Weak or exposed credentials remain one of the easiest ways for adversaries to escalate privileges and move laterally.Active Directory Certificate Services (AD CS) Abuse: Misconfigurations in AD CS provide attackers with near-instant escalation paths to domain compromise. These attack paths, often described as numbered escalation variants, can lead to immediate domain compromise under…