Author: HackWatchit

an absolute AI hot streak lately, consistently dropping breakthrough after breakthrough. Nearly every recent release has pushed the boundaries of what’s possible — and it’s been genuinely exciting to watch unfold.  One announcement that caught my eye in particular occurred at the end of July, when Google released a new text processing and data extraction tool called LangExtract. According to Google, LangExtract is a new open-source Python library designed to … “programmatically extract the exact information you need, while ensuring the outputs are structured and reliably tied back to its source” On the face of it, LangExtract has many useful applications, including, Text anchoring.…

Hackers release 9GB of stolen files from the computer of an alleged North Korean hacker, revealing tools, logs, sensitive data and much more. The data is now available for download via DDoSecrets. It is not often that the inner workings of a cyber-espionage operator are exposed, but that is exactly what happened when two hackers decided to publish a trove of stolen files during one of the world’s biggest hacking conferences. The material did not surface on a cybercrime forum or through a misconfigured database. Instead, it was shared through Phrack, the legendary hacker publication, during its 40th anniversary issue…

Within the software as a service (SaaS), reseller, banking and payments space, strategic partnerships are emerging as the victor of the buy-build-partner dilemma. While the old model of payments partnerships was often built on a singular objective, such as offloading payment functionality, the reality today is that partnerships are more strategic, customer experience-driven and deliver more control without adding excessive operational burden. As FinTech players such as independent sales offices (ISOs), independent software vendors (ISVs) and financial institutions deliberate on the best way to modernize their payment offerings, one principle is gaining traction: sustainable success in payments is rooted not…

Overview CVE-2025-29891 is a remote command injection vulnerability found in Apache Camel’s HTTP endpoints when misconfigured. The flaw arises from insecure usage of the CAmelExecCommandExecutable and CAmelExecCommandArgs headers, which can be exploited to execute arbitrary commands. It affects systems where the attacker can interact with HTTP-exposed Camel routes, particularly if security hardening is weak or missing. A similar vulnerability was previously detailed by OffSec in our blog post on CVE-2025-27636. CVE ID: CVE-2025-29891 Severity: Medium CVSS Score: 4.8 EPSS Score: 0.24% Impact: Remote Code Execution Attack Vector: Network Authentication Required: No Vulnerable Component: camel-exec route in Apache Camel Technical Breakdown…

Security leaders are flush with tools and data, but it’s not helping their programs mature. In this Help Net Security video, PlexTrac’s Dan DeCloss outlines the 3 key gaps holding security programs back and what sets mature programs apart. From fragmented data and workflows to ineffective prioritization, learn where to focus to evolve faster and prove progress. As more organizations strive to level up their capabilities, conversations around security program maturity are becoming central to guiding long-term strategy and improvement. This video offers a perspective on what separates maturity from activity and how security leaders can accelerate their path forward.…

The North Korean state-sponsored hackers known as Kimsuky has reportedly suffered a data breach after two hackers, who describe themselves as the opposite of Kimsuky’s values, stole the group’s data and leaked it publicly online. The two hackers, named ‘Saber’ and ‘cyb0rg,’ cited ethical reasons for their actions, saying Kimsuky is “hacking for all the wrong reasons,” claiming they’re driven by political agendas and follow regime orders instead of practicing the art of hacking independently. “Kimsuky, you are not a hacker. You are driven by financial greed, to enrich your leaders, and to fulfill their political agenda,” reads the hackers’ address to Kimsuky…

via the cosmic humor & dry-as-the-desert wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Kite Incident’ appeared first on Security Boulevard.

The U.S. Department of Homeland Security (DHS), working with federal and international law enforcement agencies, announced last week that it has dismantled critical infrastructure used by the BlackSuit ransomware group. BlackSuit, the successor to Royal ransomware, has been linked to attacks on essential services worldwide. The operation led to the seizure of servers, domains, and digital assets used to deliver ransomware, extort victims, and launder illicit proceeds. Executed by Immigration and Customs Enforcement’s Homeland Security Investigations, the takedown follows a series of attacks since 2022 in which the Royal and BlackSuit ransomware groups compromised more than 450 known U.S. victims,…

In this Help Net Security interview, Robert Buljevic, Technology Consultant at Bridge IT, discusses how the coexistence of legacy systems and SaaS applications is changing the way organizations approach security. He explains why finding the right balance between old and new technology is essential for maintaining protection. As more companies move from traditional on-prem setups to SaaS, how is that changing the way they approach security? Are most organizations handling that shift well, or are they struggling? Most organizations are dealing with a messy reality: legacy systems combined with SaaS applications. The latter are often driven by business process owners,…