Author: HackWatchit

Among the variety of cyber-attacks that we witness happening around us, Zero-day attacks are remarkably insidious in nature. Due to the fact that these attacks exploit the unknown vulnerabilities, zero-day attacks often inflict some form of damage wherever it is affected. Patching fast is the only way to minimize the intensity of the attack, even though it does not offer a prevention strategy. Of the widely exploited vulnerabilities in 2023, 60% of those targeting network and security systems were zero-days. These aren’t distant threats; they’re happening right now. With these threats leaving little time to respond, it’s time for businesses to rethink…

Criminals are taking advantage of macOS users’ need to resolve technical issues to get them to infect their machines with the Shamos infostealer, Crowdstrike researchers have warned. To prevent macOS security features from blocking the installation, the malware peddlers are using the so-called ClickFix technique, which relies on users running malicious commands. The Shamos malware delivery campaign For the campaign, which unfolded between June and August 2025, the cyber crooks created fraudulent macOS help websites and made Google Search deliver ads pointing to them: Malicious ad pops up (Source: Crowdstrike) The fraudulent websites, parked on mac-safer[.]com and rescue-mac[.]com, provided instructions…

Australia’s Cyber and Infrastructure Security Centre (CISC) is seeking expressions of interest from highly motivated individuals who would be keen to undertake a voluntary role as a member of the Resilience Expert Advisory Group. The Trusted Information Sharing Network’s (TISN) Resilience Expert Advisory Group (REAG) promotes organisational resilience in support of Australian critical infrastructure owners and operators. The initiative focuses on giving advice, guidance, and tools to mature security and resilience approaches. The expression of interest process is being conducted to ensure the retention of corporate knowledge with sufficient refreshment and renewal of membership, as required. Nominations close by Sept.…

Since early this year, RIA-Novosti has published roughly one story per week on UVB-76, suggesting its coded messages are related to missile strikes on Iran, the war in Ukraine, and negotiations with Trump.RT, which had once pooh-poohed the idea that UVB-76 was part of Moscow’s nuclear deterrence, began regularly posting its broadcasts on X, writing in April that the station often broadcasts “coded alerts pre-major events”—particularly around phone calls between Trump and Putin—and suggesting that it operates as a “nuke failsafe.”Chatter about the station grew on Telegram, the messaging app popular in Russia. Channels claimed that UVB-76 grew active “during…

small talk is a special kind of small talk, typically observed in office spaces around a water cooler. There, employees frequently share all kinds of corporate gossip, myths, legends, inaccurate scientific opinions, indiscreet personal anecdotes, or outright lies. Anything goes. So, in my Water Cooler Small Talk posts, I discuss strange and usually scientifically invalid opinions that I, my friends, or some acquaintance of mine have overheard in the office that have literally left us speechless. Here’s the water cooler opinion of today’s post: ChatGPT access should be blocked in office, just as porn or gambling websites are blocked. 🤯…

UK organizations with sponsor licenses are now targets in a credential-harvesting phishing campaign. This campaign impersonates the UK Home Office and mimics the Sponsor Management System (SMS) login to steal usernames and passwords. Once attackers gain access, they can issue fraudulent Certificates of Sponsorship (CoS), exploit sensitive immigration workflows, or extort compromised users. The post U.K. Home Office Impersonation: A Protection Playbook for Sponser-Licensed Orgs appeared first on Security Boulevard.

In brief AUSTRAC has directed Binance Australia to nominate external auditors within 28 days after identifying “serious concerns” with anti-money laundering controls. The regulator flagged inadequate reviews, “high staff turnover,” and insufficient local management oversight at the platform. This action adds to a string of regulatory measures, including a $5.1 million fine for Kraken and warnings directed at Bitget. Australia’s financial intelligence agency has ordered the Australian arm of the world’s largest crypto exchange to appoint an independent auditor, citing “serious concerns” in its crime prevention systems that allegedly leaves the platform vulnerable to illicit money flows.AUSTRAC directed Investbybit Pty…

Pakistan-linked APT36 abuses Linux .desktop files to drop custom malware in new campaign Pierluigi Paganini August 25, 2025 APT36 uses Linux .desktop files in new attacks on Indian gov & defense, aiming for data theft and persistent espionage access. Transparent Tribe (aka APT36, Operation C-Major, and Mythic Leopard), a Pakistan-linked threat actor, is using Linux .desktop files to load malware in new attacks against government and defense entities in India. The APT group is targeting Indian government entities via spear-phishing emails deploying custom malware for persistent espionage. APT36’s latest campaign uses a malicious archive “Meeting_Notice_Ltr_ID1543ops.pdf_.zip” containing a disguised .desktop file…

Insider threats are among the hardest attacks to detect because they come from people who already have legitimate access. Security teams know the risk well, but they often lack the data needed to train systems that can spot subtle patterns of malicious behavior. A research team has introduced Chimera, a system that uses LLM agents to simulate both normal and malicious employee activity in enterprise settings. The goal is to solve one of the main problems in insider threat detection: the lack of realistic and shareable datasets. The workflow of Chimera for automated insider threat simulation Security teams have long…