Author: HackWatchit

A new ransomware operator named ‘Mora_001’ is exploiting two Fortinet vulnerabilities to gain unauthorized access to firewall appliances and deploy a custom ransomware strain dubbed SuperBlack. The two vulnerabilities, both authentication bypasses, are CVE-2024-55591 and CVE-2025-24472, which Fortinet disclosed in January and February, respectively. When Fortinet first disclosed CVE-2024-55591 on January 14, they confirmed it had been exploited as a zero-day, with Arctic Wolf stating it had been used in attacks since November 2024 to breach FortiGate firewalls. Confusingly, on February 11, Fortinet added CVE-2025-2447 to their January advisory, which led many to believe it was a newly exploited flaw. However, Fortinet told BleepingComputer…

A devastating new remote code execution (RCE) vulnerability, CVE-2025-24813, is now actively exploited in the wild. Attackers need just one PUT API request to take over vulnerable Apache Tomcat servers. The exploit, originally published by a Chinese forum user iSee857, is already available online: CVE-2025-24813 PoC by iSee857. Exploit Breakdown: How a Simple PUT Request Leads to Full RCE This attack leverages Tomcat’s default session persistence mechanism along with its support for partial PUT requests. The exploit works in two steps: The attacker uploads a serialized Java session file via PUT request The attacker triggers deserialization by referencing the malicious…

Data from Statista shows the blockchain gaming market reached $4.6 billion in 2022, with a projected compound annual growth rate of 70.3% through 2030. Funtico, a Web3 gaming platform based in Tortola, British Virgin Islands, announced integration with FunNFT Marketplace. This partnership brings Funtico’s Game Pass NFTs into FunNFT’s ecosystem, providing access to tournaments and in-game assets for players. The move aligns with trends in blockchain technology adoption within gaming. What Happens in the Mystery Tournaments? Funtico and FunNFT launch Mystery Tournaments on March 14, 2025. Players with Game Pass NFTs, available through FunNFT Marketplace, can participate. The tournaments feature…

Carrie Roberts // PowerShell incorporates the handy feature of writing commands executed to a file to make them easy to refer back to later. This functionality is provided by the PSReadline module. This feature is helpful from a usability perspective but can be a tool that hackers use against you. For example, if sensitive information like passwords are entered into the PowerShell command line, they will also be added to the history file and a hacker can review this history to discover that sensitive information. In an effort to solve this issue, the PSReadline module version v2.0.4+ will skip adding…

Cyber threats in 2025 require a proactive, adaptive approach. To stay ahead, CISOs must balance technical defenses, regulatory expectations, and human factors. By prioritizing AI-driven security, ransomware resilience, supply chain risk management, insider threat mitigation, and compliance preparedness, CISOs can strengthen their security posture. Here are the top five threats keeping CISOs up at night in 2025 and what CISOs can do about them. AI-driven cyberattacks Attackers leverage AI to automate phishing, generate deepfake voice scams, and bypass traditional security defenses. AI-powered malware can adapt in real-time, making detection harder than ever. CISO’s response: Invest in AI-driven security tools to…

Has your old Chromecast suddenly developed a problem?You’re not alone it seems.Many users of second-generation Chromecast and Chromecast Audio streaming devices have discovered that their beloved dongles have gone belly-up and are showing error messages such as:”Untrusted device: [name] couldn’t be verified. This could be caused by outdated firmware.”And what has the typical tech user learnt over the years if a piece of hardware isn’t working properly? Why, do a factory reset of course!Woah! Stop right there – because Google is advising Chromecast owners to not make the mistake of thinking that performing a factory reset on their Chromecasts will…

The cybersecurity company empowering MSPs to secure small businesses identified a highly sophisticated Microsoft 365 tenant brand manipulation and disrupted its use against their customers. Guardz, the cybersecurity company empowering MSPs and IT professionals to deliver comprehensive, AI-native cyber protection for small businesses, today disclosed the findings of its research into a highly sophisticated, ongoing phishing campaign exploiting Microsoft 365’s trusted infrastructure to manipulate victims into calling a malicious threat actor call center and potentially facilitate credential harvesting and account takeover (ATO) attempts. As email security defenses like secure email gateways (SEGs) and advanced threat protection mechanisms become more complex,…

Cloud Security Engineer TUI Group | Portugal | Hybrid – View job details As a Cloud Security Engineer, you will contribute to the implementation of security solutions and will work alongside our Security Operations team to ensure appropriate controls are engineered, addressing the technical requirements of our global business. You will support the implementation and maintenance of identity protection, threat detection, and email security solutions across Microsoft 365 environment. Cybersecurity Architect ExpressVPN | Poland | Hybrid – View job details As a Cybersecurity Architect, you will plan, implement, manage, monitor and upgrade security measures/architectures for the protection of the organization’s…

Tenable Research reveals that AI chatbot DeepSeek R1 can be manipulated to generate keyloggers and ransomware code. While not fully autonomous, it provides a playground for cybercriminals to refine and exploit its capabilities for malicious purposes. A new analysis from cybersecurity firm Tenable Research reveals that the open-source AI chatbot DeepSeek R1 can be manipulated to generate malicious software, including keyloggers and ransomware. Tenable’s research team set out to assess DeepSeek’s ability to create harmful code. They focused on two common types of malware: keyloggers, which secretly record keystrokes, and ransomware, which encrypts files and demands payment for their release.…