Ukrainian military targeted in new Signal spear-phishing attacks

Ukraine's Computer Emergency Response Team (CERT-UA) is warning about highly targeted attacks employing compromised Signal accounts to send malware to employees of defense industry firms and members of the country's army forces.

The bulletin mentions that the attacks started this month, with Signal messages containing archives posing as meeting reports.

The archive contains a PDF and an executable file, the first acting as a lure for victims to open and trigger the launching of the second.

🔗 BleepingComputer
🧑‍💻 @agamtechtricks

🚨 Hackers are hijacking compromised Signal accounts to spread Dark Crystal RAT malware—targeting Ukraine’s military & defense industry.

🔹 Fake meeting minutes 📄
🔹 Hidden malware inside archives 🦠
🔹 Remote control & data theft

Read more: https://thehackernews.com/2025/03/cert-ua-warns-dark-crystal-rat-targets.html

💀 CISA just flagged this backup flaw as actively exploited!

CVE-2024-48248 | Unauthenticated file read in NAKIVO Backup & Replication exposes sensitive data & credentials.

🔹 Exploit already public
🔹 Update before it’s too late

Details: https://thehackernews.com/2025/03/cisa-adds-nakivo-vulnerability-to-kev.html

🚨 Spyware Alert!

Citizen Lab reports Australia, Canada, Denmark & more may be using Paragon's Graphite spyware—the same tool used to target journalists & activists via WhatsApp.

⚠️ 90+ journalists targeted
⚠️ iPhones & Androids hacked

🔗 Full story: https://thehackernews.com/2025/03/six-governments-likely-use-israeli.html

Roku is forcing users to watch ads before they can use their TV in ‘test’

Owners of smart TVs and streaming sticks running Roku OS are already subject to video advertisements on the home screen, and now they are getting forced to watch ads before they can even access the home screen.

Some people might not be as receptive to more obtrusive ad formats if they have grown accustomed to seeing a static image on an ignored area of their screen. One Redditor commented,

I could accept the static ad on the side. Forcing a loud commercial is awful.

Although Roku already has advertisements on the home screen and in its screensaver, autoplaying advertisements when the TV is turned on is a novel and quite hostile practice.

🔗 9to5Google
👨🏻‍💻 @agamtechtricks

RISC-V support is no more in Chimera Linux. 😳

https://news.itsfoss.com/chimera-linux-drops-risc-v/

Anyone have an opinion about Start9 or would you just build your own version of this type of sovereign computing? https://start9.com/

Garmin also has devices that connect to satellites. https://www.garmin.com/en-US/c/outdoor-recreation/satellite-communicators/

I would still prefer "winutil" from Chris Titus in combination with Shutup10++

https://github.com/christitustech/winutil

https://www.oo-software.com/en/shutup10

these factories will no longer retrieve files but generate tokens 👀

https://fxtwitter.com/slow_developer/status/1902148011569881503

#A15 #Unofficial #TD #GSI #VoltageOS #AOSP

Build Date: 2025 03 20
February 2025 Security Patch

VoltageOS 4.2-20250320.124127

Changelog

Add fix for BPF-less devices to fix bootloops on older devices
Add fix for Bluetooth on some devices
Add fix for network traffic tracking for older devices
Add "rework securize" patch to set device props better
Remove workarounds added to TrebleApp (not being useful)
Update Graphene Apps to v30

Maintainer: Chrisaw
Download

@treblegsis_privacysecure_chat
@treblegsis_privacysecure_channel

⚡️Charging Your Water with Water Smacker
@takebackourtech

At the Conscious Life Expo in LA, I had the chance to speak with Andrew Makky of Hydrogen Garage about the Water Smacker—a fascinating device that charges water with non-hertzian energy from space.

This static, lightning-like energy, also called ether or orgone energy, builds up over a few days, creating highly energized water.

Why would you want to drink this charged water? Learn more about the science and potential benefits in our conversation.

✌️ MORE POSTS | 🗯 CHAT GROUP | 📩 NEWSLETTER | XMPP
Follow 🫶 @takebackourtech

MiCTS

Trigger Circle To Search feature on your android device. Supports android 9 - 15.

🔗 Links
- Download
- Screenshots
- Source Code
Developer: parallelcc

❤️ Special thanks to 🍊 for recommending!

🏷 Tags: #Circle_To_Search #Android #Utilities #Special

Another useless feature no one asked for.

https://www.xda-developers.com/windows-11-will-tell-you-when-its-time-to-upgrade-your-pc-soon/

Run CachyOS and Windows 11 side by side! 🐧🪟

https://www.youtube.com/watch?v=EoGA8A3b7mw

POCO F7 Series Will Launch Globally in The Next Week
https://www.gizchina.com/2025/03/20/poco-f7-series-will-launch-globally-in-the-next-week/

Reimagining Flip Phones: Huawei Pura X Arrives With Innovative Design
https://www.gizchina.com/2025/03/20/huawei-pura-x-foldable-smartphone-arrives-with-an-innovative-design/

Two major vendors just patched remote code execution flaws—update NOW before attackers exploit them.

🔴 Veeam Backup (CVE-2025-23120, 9.9/10)
➡️ Affects v12.3.0.310 & earlier
➡️ Allows RCE by authenticated users
➡️ Fixed in v12.3.1 (12.3.1.1139)

🔴 IBM AIX (CVE-2024-56346 & CVE-2024-56347, 10/10 & 9.6/10)
➡️ Affects AIX 7.2 & 7.3
➡️ Exploitable via NIM services

⚠️ No attacks seen yet, but don’t wait—patch immediately.

Full details: https://thehackernews.com/2025/03/veeam-and-ibm-release-patches-for-high.html

Cloud security isn't automatic—it's a shared battle.

Think your cloud provider handles everything? Think again. Microsoft 365 users must secure their own data, access, and backups.

🚨 No MFA, weak passwords, or no backup? You're at risk.

🔗 See what you must do now: https://thehackernews.com/2025/03/how-to-protect-your-business-from-cyber.html