Author: HackWatchit
Security Affairs newsletter Round 536 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini August 10, 2025 A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. International Press – Newsletter Cybercrime Warning: Phishing campaign detected New WhatsApp Tools and Tips to Beat Messaging Scams GenAI Used For Phishing Websites Impersonating Brazil’s Government FraudOnTok FinCEN Issues Notice on the Use of Convertible Virtual Currency Kiosks for Scam Payments and Other Illicit Activity …
Navy pushing for AI to bolster authentication in a zero trust environment AI agents can create behavioral profiles that can more accurately authenticate not just a person or a device, but authenticate a person to a specific device. Daisy Thornton@dthorntonWFED August 6, 2025 4:55 pm 3 min read It’s perhaps no surprise that two of the biggest buzzwords in cybersecurity — zero trust and artificial intelligence — are coming together. David Voelker, zero trust lead at the Department of the Navy, said he’s been pushing for an agentic threat detection framework as the next stage of the Navy’s zero trust…
Sixty malicious Ruby gems containing credential-stealing code have been downloaded over 275,000 times since March 2023, targeting developer accounts. The malicious Ruby gems were discovered by Socket, which reports they targeted primarily South Korean users of automation tools for Instagram, TikTok, Twitter/X, Telegram, Naver, WordPress, and Kakao. RubyGems is the official package manager for the Ruby programming language, enabling the distribution, installation, and management of Ruby libraries, known as gems, much like npm for JavaScript or PyPI for Python. The malicious gems in this campaign were published onto RubyGems.org under various aliases over the years. The offending publishers are zon,…
GPUs serve as the fundamental computational engines for AI. However, In large-scale training environments, overall performance is not limited by processing speed, but by the speed of the network communication between them. Large language models are trained on thousands of GPUs, which creates a huge amount of cross-GPU traffic. In these systems, even the smallest delays compound. A microsecond lag when GPUs share data can cause a chain reaction that adds hours to the training job. Therefore, these systems require a specialized network that’s designed to transfer large amounts of data with minimal delay. The traditional approach of routing GPU…
Critical WinRAR flaw CVE-2025-8088 exploited by Russia-linked hackers to spread RomCom malware, update to version 7.13 now to stay protected. Learn how a Russia-linked group is using this vulnerability and why you must manually update to WinRAR 7.13 now to stay safe. WinRAR, a popular tool used by millions to manage compressed files, has been found to have a serious security weakness that was being actively exploited by hackers. The flaw, officially named CVE-2025-8088, allowed attackers to trick the program into installing malware on users’ computers without their knowledge. Security researchers at the firm ESET discovered and disclosed the issue,…
When we talk about attention in computer vision, one thing that probably comes to your mind first is the one used in the Vision Transformer (ViT) architecture. In fact, that’s not the only attention mechanism we have for image data. There is actually another one called Squeeze and Excitation Network (SENet). If the attention in ViT operates spatially, i.e., assigning weights to different patches of an image, the attention mechanism proposed in SENet operates in channel-wise manner, i.e., assigning weights to different channels. — In this article, we are going to discuss how the Squeeze and Excitation architecture works, how to implement…
A new kind of filmmaker is set to walk the red carpet at this year’s Venice film festival: human creators who embrace artificial intelligence in their work. The Reply AI Film Festival is an international short-film competition that seeks to “explore new frontiers in storytelling and creative production,” according to a July 28 press release. This year’s theme, “Generation of Emotions,” challenges filmmakers to demonstrate how AI can create “authentic and emotionally engaging” films — a skill traditionally considered uniquely human. The participants, a diverse group of filmmakers, writers, animators and AI artists from countries including Brazil, France, Germany, Italy,…
Embargo Ransomware nets $34.2M in crypto since April 2024 Pierluigi Paganini August 09, 2025 Embargo ransomware, likely a BlackCat/Alphv successor, has netted $34.2M in crypto since mid-2024, researchers say. The Embargo ransomware group has processed $34.2M in crypto since emerging in April 2024, researchers from Blockchain intelligence company TRM Labs report. “TRM Labs has identified approximately USD 34.2 million in incoming transaction volume likely associated with the group, with most victims located in the United States (US) in the healthcare, business services, and manufacturing sectors.” reads the report published by TRM Labs. The RaaS mainly targeted US healthcare, business services,…
LinkedIn is a great communication tool for business professionals that informs, provides opportunities, and fosters collaboration — which is exactly why it is attractive to sophisticated cyber adversaries, including aggressive nation state actors, who use LinkedIn for nefarious activities such as information gathering, target profiling, human-asset engagement, fraud, social engineering, and trust building. Urgent and time sensitive messages, especially regarding career opportunities, target cognitive vulnerabilities and are leveraged by attackers to manipulate victims. Use the tool, but know the dangers and take necessary precautions. Don’t share your clearance level or indicators of wealth — this makes you a preferred target Don’t share details…