Author: HackWatchit

in PyTorch 2.0 in March 2023, the evolution of torch.compile has been one of the most exciting things to follow. Given that PyTorch’s popularity was due to its “Pythonic” nature, its ease of use, and its line-by-line (a.k.a., eager) execution, the success of a just-in-time (JIT) graph compilation mode should not have been taken for granted. And yet, just over two years later, the importance of this feature cannot be overstated: It is an essential tool in optimizing the runtime performance of AI/ML workloads. Unfortunately, the use of torch.compile still feels a bit like a dark art. When it works it is…

Analyzing evolution of the PipeMagic malware Pierluigi Paganini August 19, 2025 Hackers exploited Windows flaw CVE-2025-29824 to deploy PipeMagic malware in RansomExx attacks, Kaspersky revealed. A joint report from Kaspersky and BI.ZONE analyzed the evolution of PipeMagic malware from its first detection in 2022 to new infections observed in 2025. The researchers identified key changes in its operators’ tactics. BI.ZONE experts focused on a technical analysis of the CVE-2025-29824 vulnerability exploited to deploy PipeMagic malware RansomExx attacks. In May, the Play ransomware gang exploited a Windows Common Log File System flaw CVE-2025-29824 in zero-day attacks to gain SYSTEM privileges and deploy malware on compromised systems. The vulnerability CVE-2025-29824, (CVSS…

Using a single, carefully-crafted prompt, Cybernews researchers were able to manipulate Lenovo’s customer service AI chatbot, Lena, into giving up customer agent session cookies, which opened up the possibility of multiple lines of attack, from dropping backdoors and stealing to laterally moving through corporate networks. The post Flaw in Too-Trusting Lenovo Chatbot Could Have Let Hackers In appeared first on Security Boulevard.

I’ve spent the last decade building and analyzing data-driven products in fintech and crypto, watching multiple market cycles from the inside — both as a participant and as someone who has to explain them to boards, clients, and teams. Now I lead Data & Analytics @ The Open Platform / Wallet in Telegram, and it’s not only personal but professional curiosity in the topic. The noise in this space is endless, so I wanted to create one structured analytical piece that cuts through the hype and gives a clear view of what matters right now. In this mid-2025 review, we’ll…

Cisco and Endace have released the Findings Report from the Security Operations Center (SOC) at RSAC™ 2025 Conference. The partners used data from the Moscone Center Wireless Network to provide SOC services. Since 2017, the purpose of the SOC has been to monitor the network activity during the event and provide SOC tours and sessions during the conference. From the tours and sessions — and this Findings Report published by sponsors Cisco and Endace — you can learn about what happens on an open, unsecure wireless network. The network infrastructure at RSAC is managed by the Moscone Center. You can…

In today’s business world, vendors and solution providers are looking for opportunities to collaborate as they deliver key products and solutions to customers to keep their data secure. These partnerships are sometimes not considered when a cybersecurity solution sale is made or when service is provided after the deal is done. Behind every great cybersecurity experience is a chain of collaboration: the vendor who builds the solution, the partners who deliver and support it, and the customer who relies on it all to work seamlessly. When that chain is strong, your business feels it through faster resolutions, tailored support and…

Git 2.51 is out, and the release continues the long process of modernizing the version control system. The update includes several technical changes, but one of the most important areas of work is Git’s move toward stronger cryptographic security through SHA-256 support. Git has relied on SHA-1 since its creation in 2005. SHA-1 has been showing its age for years, with researchers demonstrating collision attacks that make it unsuitable for long-term use. The community has been preparing for a transition to SHA-256, but the change is not simple. Git repositories are built around object IDs, which depend on the underlying…

Trend Micro has uncovered a new ransomware group, Crypto24, which blends legitimate tools with custom-built malware to carry out stealth attacks. The group relies on advanced evasion techniques to slip past security controls and endpoint detection and response (EDR) systems, using purpose-built bypass tools and manipulating security solutions to avoid detection. Beyond ransomware deployment, Crypto24 engages in data theft and long-term surveillance, leveraging keyloggers, Google Drive exfiltration, and persistent remote access. According to Trend Micro, the group has targeted organizations in Asia, Europe, and the U.S., with financial services, manufacturing, entertainment, and technology among its primary sectors of focus. Trend…

The UK’s South Yorkshire Police lost 96,000 bodycam videos in a data transfer mishap, impacting 126 cases. Poor backups and IT failures led to the deletion. South Yorkshire Police (SYP) has been officially reprimanded by the Information Commissioner’s Office (ICO) after an investigation revealed the force deleted over 96,000 pieces of body-worn video (BWV) evidence. The incident, which happened on July 26, 2023, was a result of serious failures in the force’s IT systems and record-keeping. In its official statement, the ICO, the UK’s data protection regulator, announced it had reprimanded SYP because the force “did not have the appropriate…