Author: HackWatchit

Prove launched Unified Authentication, an authentication solution that passively and persistently recognizes customers, no matter where they appear or how often their devices or credentials change. This launch reflects a critical market shift: identity is no longer just a tool for fraud prevention or compliance – it’s a core enabler of digital commerce. Businesses must seamlessly recognize and authenticate customers across mobile apps, desktops, laptops, call centers, kiosks, and third-party platforms. But as companies move away from SMS OTPs and other legacy tools, they face new challenges. While device fingerprinting, behavioral biometrics, and passkeys each add value, none single handedly…

Researchers cracked the encryption used by DarkBit ransomware Pierluigi Paganini August 12, 2025 Researchers at cybersecurity firm Profero cracked DarkBit ransomware encryption, allowing victims to recover files for free. Good news for the victims of the DarkBit ransomware, researchers at cybersecurity firm Profero cracked the encryption process, allowing victims to recover files for free without paying the ransom. However, at this time, the company has yet to release the decryptor. Israel’s National Cyber Directorate linked the DarkBit ransomware operation to the Iran-nexus threat actor MuddyWater APT group. In 2023, Profero responded to a DarkBit ransomware attack encrypting multiple VMware ESXi…

Key Trends Driving Cloud Computing in 2025 Smarter Cloud Tools with AI Artificial Intelligence (AI) and Machine Learning (ML) have become embedded into core cloud offerings. In fact, A Gartner report suggests 87% of organizations will adopt AI by 2025, often via cloud platforms. These capabilities are not limited to automation, they’re improving real-time analytics, enhancing customer experiences, and even strengthening cybersecurity. Cloud-native AI services now help companies detect anomalies, predict user behavior, and make data-driven decisions at scale. Cloud-powered AI is solving real-world problems from fraud detection to predicting what customers will want next. Faster Data Processing with Edge…

South Africa is currently undergoing a significant digital transformation. National initiatives are focused on modernizing public services by fostering a dynamic digital economy and integrating advanced technologies, including artificial intelligence and cloud computing. This rapid technological evolution, however, also introduces an increasingly complex threat landscape. The increase of cyberattacks, particularly ransomware and phishing campaigns across the African continent, underscores the critical requirement for robust, locally hosted cybersecurity solutions. Strategic Imperatives for South Africa’s Digital Landscape South Africa’s vibrant and expanding digital ecosystem presents both considerable opportunities and distinct challenges. As a key participant in the African digital landscape, the country…

From Risk to ROI: How Security Maturity Drives Business Value madhav Tue, 08/12/2025 – 04:30 Cyber threats are like moving targets—constantly evolving and increasingly pervasive. In a hyper-connected world, no individual, industry, or organization is immune. The threat landscape presents a serious and persistent challenge for governments, businesses, critical infrastructure, and individuals alike. Many organizations ensure resilience and elevate their security maturity by adopting a structured framework for guidance. A leading standard, the NIST 2.0 Cybersecurity Framework (CSF), offers a comprehensive, scalable approach to building a proactive cybersecurity program. By following this framework, organizations can effectively address evolving cyber threats…

Five organizations representing state and local governments have sent an open letter to congressional appropriations leaders, calling for the restoration of federal funding that was cut from their cybersecurity programs. They urged lawmakers to reinstate funding for the Multi-State Information Sharing and Analysis Center (MS-ISAC), noting that members of this non-partisan coalition depend on the MS-ISAC to protect the nation’s critical infrastructure and services from a constantly evolving range of cyber, physical, and information operations threats, including those posed by foreign adversaries. In a letter Doug Robinson, executive director of the National Association of State Chief Information Officers; Matthew Chase,…

In brief FTX investors have filed a lawsuit against Silicon Valley law firm Fenwick & West, accusing it of being “deeply intertwined” in the crypto exchange’s collapse. Of 130 firms that worked with FTX named in multidistrict litigation, Fenwick & West is the only one accused of having actual knowledge of FTX’s scheme and providing substantial assistance. Investors allege the firm designed corporate structures enabling theft of hundreds of millions in customer funds and used its prestige to legitimize FTX with investors. Silicon Valley law firm Fenwick & West faces accusations of being “deeply intertwined in nearly every aspect” of…

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was exploited in zero-day attacks by the Russian ‘RomCom’ hacking group to drop different malware payloads. RomCom (aka Storm-0978 and Tropical Scorpius) is a Russian cyberespionage threat group with a history in zero-day exploitation, including in Firefox (CVE-2024-9680, CVE-2024-49039) and Microsoft Office (CVE-2023-36884). ESET discovered that RomCom was exploiting an undocumented path traversal zero-day vulnerability in WinRAR on July 18, 2025, and notified the team behind the popular archiver tool. “Analysis of the exploit led to the discovery of the vulnerability, now assigned CVE-2025-8088: a…

“Leakage” in machine learning (ML) occurs when data that an ML model should not learn on is included at training time, often in unexpected ways.This can cause overconfidence in ML model training results, producing cybersecurity ML models that fail to recognize threats.CrowdStrike data scientists employ strategic data splitting during ML model training to prevent data leakage. Since day one, CrowdStrike’s mission has been to stop breaches. Our pioneering AI-native approach quickly set our platform apart from the landscape of legacy cybersecurity vendors that were heavily reliant on reactive, signature-based approaches for threat detection and response.  Our use of patented models…