Author: HackWatchit

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user’s Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet’s access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based healthcare devices and karaoke machines. A report from the Google Threat Intelligence Group (GTIG) said Google has severed ties with Videostrong Technology Co., a TV…

A new ransomware operation appeared in August 2026 with an ambitious pitch: sophisticated infrastructure, aggressive affiliate payouts, global ambitions, and what it calls the “first AI powered, quantum resistant ransomware.”  Within approximately six weeks, Storm had claimed over 50 victims across North America, Europe, and Oceania. Its targets span healthcare, finance, manufacturing, business services, government, transportation, and critical infrastructure.   Storm arrived with the structure of an established Ransomware as a Service operation. Its affiliate program offers revenue shares reaching 90%, while its leak site looks closer to a commercial software platform, complete with an interactive victim map, search functionality, sector…

An underground activist group says it plans to start openly doxing billionaires as part of a phased campaign against what it calls the American oligarchy—beginning this month with a release that maps the homes of Elon Musk, his brother Kimbal, and Tesla’s board, alongside investors and suppliers that keep the corporation afloat.Two of its members, interviewed by WIRED on the condition of anonymity, say they spent the past year constructing dossiers on billionaires—and one trillionaire—and the people they consider their top lieutenants, using nearly every method available to a private investigator, and some that are not.The pair say the group…

Executive Summary This overview highlights recent threat intelligence observed by Unit 42. Common adversary activities focus on strategic intelligence collection and financial extortion. We observed these activities alongside a cross-cutting adoption of artificial intelligence tools across multiple threat disciplines. Here, we share observations and behaviors associated with these activities. For in-depth access to Unit 42 threat intelligence insights, explore our Threat Intelligence Services offerings. Threat Highlights Cyberespionage State-sponsored and advanced persistent threat (APT) campaigns focused on covertly acquiring strategic intelligence, intellectual property or geopolitical data. Key Observations and Behaviors Widespread reliance on living-off-the-land (LotL) binaries and built-in administration tools to…

Your Template for OMB M-26-15 Migration The transition to Post-Quantum Cryptography (PQC) is not just a technical upgrade; it is a vital national security imperative that represents the most significant cryptographic reset in the history of the Federal Government. Driven by Executive Order 14412 and Office of Management and Budget (OMB) M-26-15, Federal Civilian Executive Branch (FCEB) agencies face a strict October 22, 2026 deadline to submit comprehensive PQC Migration Plans to OMB and the Office of the National Cyber Director (ONCD). To take the heavy lifting off agency leaders facing this tight 120-day window, we developed a ready-to-use Template…

AI is accelerating vulnerability discovery and shrinking response windows, putting critical assets at more risk than ever. PHP2Shell is one recent example of the urgency security teams face as AI-driven threats evolve and affect organizations worldwide. At this pace, security teams struggle to apply patches and plan upgrades before new threats emerge. Organizations need the right tools, threat intelligence, and expertise to adapt quickly. That’s why our customers had PHP2Shell coverage for exploit attempts before disclosure, signatures ready on day-zero, and advanced detections in Splunk to see attack activity. New to PHP2Shell? Watch the 2 minute video. Detection coverage for…

GRAHAM CLULEY Well, it could be unfashionable trousers. PAUL DUCKLIN Yeah, I suppose. GRAHAM CLULEY There is the potential for some sort of social embarrassment, maybe. When I was at school, I had some cord trousers, which these days would be very, very trendy.But back when I was wearing them in the 1980s, they certainly weren’t. PAUL DUCKLIN Yeah, there was no normcore back then, was there? Corduroy trousers. Yes, I had some when I was about 12, and I thought they were great.But I quickly learned that that was not quite the case. Unknown Smashing Security, episode 488. PAUL…

VOLTA, the infostealer that asks an AI which victims are worth the effort Pierluigi Paganini November 02, 2026 VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims’ value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLTA, which calls itself VOLTA-AUTODOXER. It steals the usual data, then hands the loot to a large language model that ranks what the victim is worth. Ryan Fetterman laid it out in a Talos report, after the malware turned up through the CAIRN research effort. “There is a new idea in the…

Want to watch Real American Freestyle Wrestling for free in America? With a VPN for RAF, you can stream full cards on YouTube without paying $8.99 per month for FOX Nation. If you love wrestling and want to see popular fighters competing for free, you are in the right place. In this guide, I explain how to use a VPN to get an IP address in Canada or the UK. This lets you stream full RAF events live on YouTube without US geo-restrictions. Keep reading to learn which VPNs work best for RAF and the steps you need to watch…