K7 Labs exposed a Brazilian campaign using a Python WhatsApp worm for self-propagation. The in-memory AutoIt loader deploys a banking trojan that uses IMAP email as a covert C2 channel to steal banking credentials.

ShinyHunters claims responsibility for the Salesforce ecosystem breach, using OAuth tokens stolen from a previous attack to infiltrate Gainsight and access hundreds of customer instances.

Threat actors are actively exploiting the critical WSUS RCE flaw (CVE-2025-59287) to gain SYSTEM access and deploy the powerful, Chinese-linked ShadowPad espionage backdoor.

Matrix Push C2 is a new subscription service fueling fileless phishing campaigns by using deceptive browser push notifications to deliver malicious links and steal credentials.

SitusAMC, a key mortgage market contractor, suffered a breach that may have exposed client data from major banks like JPMorgan and Citi, raising fears of supply chain risk.

NVIDIA is adding 1.6 Tbps networking support to the Linux 6.19 kernel via the Mellanox MLX5 driver, utilizing eight 200 Gbps lanes for next-gen data center speed.

A critical chain of Fluent Bit vulnerabilities allows RCE, path traversal, and log tampering by exploiting tag handling and an auth bypass. Update to v4.1.1 now.

Apache warned of a Critical flaw (CVE-2025-65998) in Syncope. When AES is enabled for password storage, a hard-coded key allows attackers with database access to decrypt all user passwords. Update immediately.

CISA issued an urgent alert: Commercial spyware is actively exploiting zero-click flaws and malicious QR codes to hijack messaging apps (Signal, WhatsApp) for espionage against government and civil society targets.

Golden dMSA tool exploits Golden DMSA attack against delegated Managed Service Accounts.

Turn your signal-to-noise ratio into a key metric, learn how to score it, and identify challenges regarding scope, policy, staff, rewards, researchers, and processes.  

Welcome to watchTowr vs the Internet, part 68.

That feeling you’re experiencing? Dread. You should be used to it by now.

As is fast becoming an unofficial and, apparently, frowned upon tradition - we identified incredible amounts of publicly exposed passwords…

In this blog, I’ll walk you through: If you’re a tech‑savvy security enthusiast who loves practical, low‑cost hardening tips, this one’s for you. Pi‑hole 101: A DNS “sinkhole” for ads, trackers and junk Pi‑hole is a network‑level ad and tracker blocker. Instead…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread