Author: HackWatchit

In 26 years of building security and cryptographic services at Cisco, I’ve worked through a long list of defects in protocols and systems. Only a small minority of the cryptographic failures I’ve seen came from someone breaking the algorithm. Far more often, systems fail in the gap between fix available and fix deployed. That gap is the last mile of trust. It’s where a patch published upstream reaches a global product portfolio months later. It’s where an embedded device ships with a cryptographic library that will never be updated in its service life. It’s where a fix moves cleanly through…

ODVA announced that CIP Security has been formally certified by TÜV Rheinland to meet the applicable requirements of IEC 62443-4-2 at Security Level Capability 3 (SL-C 3). Security Level 3 protects against intentional violations using sophisticated means from attackers with moderate resources, IACS-specific skills, and moderate motivation. Achieving formal certification that the CIP Security Specification complies with the IEC 62443 standard reinforces the position of the technology as the definitive security framework for EtherNet/IP products, simplifying the compliance path for product manufacturers incorporating CIP Security. IEC 62443-4-2, part of the IEC 62443 series, defines the technical cybersecurity requirements for components…

A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle “Rey,” was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey’s father — Royal Jordanian Airlines. The logo for Jeppesen ForeFlight, a business unit divested last year by the aerospace firm Boeing.…

Key takeaways Only 24 percent of organizations can fully inspect AI traffic without impacting performance, according to Check Point’s 2026 Cloud Security Report. →Voice agents are easy to talk into things. Researchers got a leading realtime voice model to give harmful answers to about 70 percent of spoken requests by varying their speed, pitch and background noise →A transcript check can be blinded. An attacker can speak the instruction and tamper with the recording, so the transcript shows garbled words or nothing at all while the model still receives the original audio →Audio guardrails screen the sound itself. They…

Enterprises spent the last two years racing to capture the vast potential of AI, authorizing AI agents to touch production code, internal databases, customer tickets and financial ledgers. Because these agents operate non-deterministically with broad capabilities, they can easily be manipulated into unexpected or malicious behavior. The result is agents breaking out of isolation, shifting AI risk from a hallucinating chatbot to an operational liability.  The standard fixes, such as software containers or prompt-level guardrails, aren’t sufficient to prevent malicious agent behavior. And traditional endpoint security was not designed to secure agents, which operate with real user access. Just as…

// Description: This query attempts to identify post-exploitation command execution within the context of a PHP web server or worker process. // Notes: This hunting query is not specific to CVE-2026-109618 and CVE-2026-109619. It is capable of identifying exploitation of various web application vulnerabilities. This query may also produce false positive findings depending on the specific web applications running. We recommend validating if any identified activity is expected for the web applications running on systems. config case_sensitive = false| dataset = xdr_data| filter event_type = ENUM.PROCESS and event_sub_type = ENUM.PROCESS_START and action_process_image_name != null| fields _time, agent_hostname, agent_id, event_id, actor_effective_username, actor_process_image_name, actor_process_command_line,…

Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques Pierluigi Paganini November 02, 2026 Chainalysis suffered a cyberattack exposing customer names, emails and user IDs, while investigation data and passwords remain safe. Blockchain analytics firm Chainalysis says it was the target of a cybersecurity incident. A threat actor accessed its systems and internal tools and stole some non-sensitive customer data. “This month, Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools.” reads the statement published by the company, which also includes the full email sent to affected customers. Chainalysis says it…

A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang. As BBC News reports, detectives have linked the man to the 2024 attack against blood-testing firm Synnovis, that disrupted London hospitals, and resulted in the death of a patient.The suspect, who has been named by German media only as “Vladimir K” was originally detained in May in Japan, after he travelled there on holiday. According to German officials, the man’s vacation plans were intercepted and Japanese police were waiting for him on arrival. Earlier this month he was extradited…

The cryprocurrency exchange Binance is investigating a suspected hack after billions of dollars moved from wallets associated with the exchange on October 29, 2026. Outside investigators have estimated the suspicious transfers at up to $5.8 billion, a figure that would make this the largest cryptocurrency theft publicly reported if confirmed. The exchange has not confirmed that amount as stolen but confirmed that it was investigating the incident and assured customers that their funds were “completely safe.” Meanwhile, cryptocurrency issuers began freezing assets linked to the suspicious activity.  Billions Moved Before Issuers Froze Assets Blockchain investigators began examining large transfers involving…