Author: HackWatchit

ZipLine is one of the most advanced social engineering phishing campaigns seen by Check Point Research. Attackers reverse the usual phishing flow by starting contact through a company’s public “Contact Us” form, tricking victims into initiating email correspondence. They exchange professional, multi-week email conversations and often request NDAs before sending a malicious ZIP file. The payload, MixShell, is in‑memory malware that uses DNS tunneling and HTTP fallback to stay connected and execute attacker commands. A second wave of attacks uses an AI transformation pretext, disguised as internal AI Impact Assessments. Targets are mainly U.S. manufacturing and supply chain–critical companies, where…

of my comfort zone and trying a style I haven’t used before. This post will be essayistic and metaphorical, relatively short, drawing on ancient philosophy to reflect on modern data science. I hope it entertains you—and sparks a few reflections along the way. In Plato’s Republic, prisoners sit chained inside a cave. There’s a fire burning behind them and, on the wall before them shadows flicker. These shadows are all the prisoners ever see. They mistake them for reality itself, unaware that outside the cave lies the true world, full of light and substance. How different is that to working with…

Tungsten Automation, a leading provider of workplace automation software was the victim of a cyber attack that resulted in the theft of data on more than 5,000 customers, the company disclosed on Friday. A letter to Tungsten customers dated August 22nd and shared with Maine’s Attorney General in keeping with that state’s data privacy law revealed that Tungsten Automation discovered “suspicious activity… on its internal IT networks” on May 27th. A subsequent investigation found that “an unauthorized party accessed Tungsten’s internal IT network and obtained certain files in May 2025.” The company’s review of its internal IT systems identified 5,556…

A new study by the data privacy firm Incogni, shared with Hackread.com, has revealed that a majority of the most-downloaded foreign apps in the US are still aggressively collecting and sharing user data. The research focused on the ten most popular applications from outside the country and found that over half of them are owned by Chinese companies. The study, published on August 26, 2025, shows just how dominant these apps have become. According to the findings, the apps studied have been downloaded an estimated 1 billion times in the US, and 755 million of those downloads are from Chinese-owned…

The U.S. Environmental Protection Agency (EPA) has launched one of the first federal programs to directly help water utilities defend against cyber threats, unveiling a US$9.5 million grant initiative for public drinking water systems during an August 19 webinar. But the Foundation for Defense of Democracies (FDD) warns that restrictive eligibility rules and limited outreach risk leaving many utilities, particularly smaller and under-resourced ones, without access to the funds. With cyberattacks on water infrastructure escalating, FDD cautions that narrowing support could leave some of the nation’s most vulnerable communities exposed to digital threats. “America’s water utilities are under attack from…

The Maryland Transit Administration (MTA) said Sunday it is investigating a cybersecurity incident involving unauthorized access to some of its systems. MTA said the Mobility paratransit services are unable to schedule new trips or rebook existing trips. Previously scheduled Mobility trips will be honored this week. However, new bookings are not available. Eligible riders can instead use the MTA’s Call-A-Ride service online or by calling 410-664-2030. Also impacted are MTA service operations and information systems, including real-time information and call centers. Read the rest of the story at CBS News.

CVE-2025-48384, a recently patched vulnerability in the popular distributed revision control system Git, is being exploited by attackers. Details about the attacks are not public, but the confirmation of exploitation comes from the US Cybersecurity and Infrastructure Security Agency (CISA), which added the flaw to its Known Exploited Vulnerabilities catalog on Monday. About CVE-2025-48384 “[CVE-2025-48384] stems from a mismatch in how Git reads versus writes configuration values containing control characters,” DataDog researchers explained. “The vulnerability can be exploited to write a malicious Git Hook script, resulting in remote code execution (RCE) whenever subcommands like git commit and git merge are…

When your policies live in silos, your security does too. I talk to a lot of security leaders who think they’ve “modernized” because they’ve got secure web gateway (SWG) from one vendor, cloud access security broker (CASB) from another, and zero trust network access (ZTNA) from a third. On paper, it looks like a strong stack. In practice, it’s a maze of consoles, redundant rules, and gaps where policies simply don’t follow the user. In a fast-moving environment, that’s more than a nuisance; it’s a liability. One missed update, one misaligned rule set, and your “secure” architecture turns into an…

U.S. CISA adds Citrix Session Recording, and Git flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 26, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix Session Recording, and Git flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Citrix Session Recording, and Git flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2024-8069 (CVSS score of 5.1) Citrix Session Recording Deserialization of Untrusted Data Vulnerability CVE-2024-8068 (CVSS score of 5.1) Citrix Session Recording Improper Privilege Management Vulnerability CVE-2025-48384 (CVSS score of 8.1) Git Link Following Vulnerability CVE-2024-8069 is a limited…