Author: HackWatchit

Latest CISA cyber guidance urges organizations to inventory OT assets CISA’s latest guidance on inventorying OT assets comes as cyber experts warn many critical infrastructure organizations “don’t even know what they have.” Justin Doubleday@jdoubledayWFED August 13, 2025 6:14 pm 3 min read The Cybersecurity and Infrastructure Security Agency has rolled out new guidance to help deal with what some cyber experts say is a rising concern: a lack of visibility into threats to operational technology. CISA on Wednesday published “Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators.” CISA developed the guidance in conjunction with other agencies, including…

Artificial Intelligence (AI) is quickly changing modern enterprises, but harnessing its full potential demands not only excellent models, but infrastructure expertise. Google Kubernetes Engine (GKE) has emerged as a foundation for AI innovation, providing a platform that combines cloud-native flexibility, enterprise-grade security, and seamless access to advanced accelerators. In a recent webinar, I joined Tom Viilo (Head of Alliances) and Guilhem Tesseyre (CTO and Co-Founder) of Zencore for a deep dive into how technical leaders can design, optimize, and operate GKE environments for AI at scale. The post How to Build, Optimize, & Manage AI on Google Kubernetes Engine appeared…

By Gary Miliefsky, Publisher of Cyber Defense Magazine Black Hat, the cybersecurity industry’s most established and in-depth security event series, has once again proven why it remains the go-to gathering for the world’s top security professionals. The in-person component of Black Hat USA 2025 wrapped up at the Mandalay Bay Convention Center in Las Vegas, drawing 20,000 verified attendees from across the globe. Over the course of a week, participants immersed themselves in cutting-edge research, breakthrough tools, and game-changing discussions that spanned every corner of the cyber domain. With over 100 Briefings, the program tackled the latest in artificial intelligence…

Ethereum (ETH) approached within 3.9% of its all-time high as altcoins demonstrated broad strength.Leverage across major alternative cryptocurrencies reached a record $47 billion according to Glassnode data.Ethereum traded at $4,738.94 as of press time, up by 3.1% in the past 24 hours and just 2.7% away from its all-time high registered in November 2021. The rally coincided with widespread altcoin gains, with seven-day returns showing Ethereum and Dogecoin both up 25.5%, XRP gaining 16.2%, and Solana advancing 13.6%.Bitfinex head of derivatives Jag Kooner attributed Ethereum’s momentum to “strong ETF inflows, institutional accumulation, and a favourable macro backdrop after softer CPI data…

When Instagram quietly rolled out its new “Friend Map” feature, it was billed as a fun way to see where friends are and discover shared hangouts. But the launch also sparked immediate concern, and for good reason. Location sharing isn’t just about convenience; it’s about trust, safety, and control over your personal data. While Meta insists the feature is opt-in, the reality is that enabling it can open the door to far more than just casual meetups. It blurs the line between digital privacy risks and physical security threats, exposing users to targeted attacks, stalking, and unwanted profiling. The way…

New Cyble data released Tuesday found that Qilin led ransomware activity for the third time in four months, capitalizing on the fall of RansomHub to claim the most victims on its data leak site. In July, Qilin hit 73 victims, about 17% of the total 423 reported attacks. Trailing behind, INC Ransom ranked second with 59 victims, fueled by a spike in attacks targeting critical infrastructure and a rise in public disclosures. Other groups continue to shift and adapt, keeping the threat landscape dynamic. In its ‘Ransomware Landscape July 2025’ update, Cyble reported that the U.S. was by far the…

Scammers are exploiting the massive popularity of Labubu collectible toys through fake websites and social media ads, resulting in consumers losing hundreds of dollars to counterfeit “Lafufu” dolls or receiving nothing at all. Here’s how to protect yourself from becoming their next victim. The Viral Phenomenon That Caught Cybercriminals’ Attention If you haven’t heard of Labubu dolls yet, you’re about to understand why they’ve become both a cultural obsession and a cybersecurity nightmare. These small, mischievous-looking plush toys with distinctive sharp teeth have exploded in popularity thanks to celebrity endorsements from Rihanna, Dua Lipa, and BLACKPINK’s Lisa, plus viral TikTok…

The Ruđer Bošković Institute (RBI), the largest Croatian science and technology research institute, has confirmed that it was the one of “at least 9,000 institutions worldwide” that were attacked using the Microsoft SharePoint “ToolShell” vulnerabilities. The attack happened on Thursday, July 31, 2025, and resulted in the deployment of ransomware. “The ransomware attack affected part of the network related to the business processes of the [Institute]’s administrative and professional services, and all those documents and databases were encrypted by the attackers,” the organization stated on Monday, and said that they are not planning on paying the ransom. Instead, they will…

Jack Hyland has worked in information security ever since graduating college and has dedicated his free time to deeply learning new techniques and technologies. He now spends his time creating and contributing to open-source projects along with performing security assessments of corporations networks and infrastructure. A Content Security Policy (CSP) is a security mechanism implemented by web servers and enforced by browsers to prevent various types of attacks, primarily cross-site scripting (XSS). CSP works by restricting resources (scripts, stylesheets, images, etc.) on a webpage to only execute if they come from approved sources. However, like most things in security, CSP…