Author: HackWatchit

Exposure management company Tenable announced a significant expansion of its Tenable One platform with the launch of Tenable AI Exposure, a comprehensive solution to see, manage, and control the risks introduced by generative AI. Unveiled at Black Hat USA 2025, these new capabilities provide an end-to-end approach that moves beyond discovery to include risk management and policy enforcement for enterprise AI platforms like ChatGPT Enterprise and Microsoft Copilot. As businesses race to adopt generative AI to boost productivity, they are inadvertently creating a new, complex, and often invisible frontier of exposure. Security teams lack visibility into how employees use these…

A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the RomCom malware. The flaw is a directory traversal vulnerability that was fixed in WinRAR 7.13, which allows specially crafted archives to extract files into a file path selected by the attacker. “When extracting a file, previous versions of WinRAR, Windows versions of RAR, UnRAR, portable UnRAR source code and UnRAR.dll can be tricked into using a path, defined in a specially crafted archive, instead of user specified path,” reads the WinRAR 7.13 changelog. “Unix versions of RAR, UnRAR, portable UnRAR source code and UnRAR…

For IT administrators, two words sure to cause undue stress are “patching cycle.” It’s a necessary process fraught with challenges. Scheduling downtime, coordinating with application owners, and bracing for the unexpected create the kind of headaches that make people want to throw their hands in the air. Historically, securing and updating infrastructure meant taking critical.. The post VCF 9.0 Live Patching Ends Maintenance Window Dread appeared first on Security Boulevard.

Never miss a new edition of The Variable, our weekly newsletter featuring a top-notch selection of editors’ picks, deep dives, community news, and more. It’s tempting to think that what separates a successful machine learning project from a not-so-great one is a cutting-edge model, more computing power, or a few extra teammates. In reality, throwing more resources at a poorly conceived problem rarely works—and in the rare instance where it does, you end up being stuck with an inefficient solution.  The articles we’re highlighting this week demonstrate, each in its own way, how important it is to ask the right questions, and…

In brief Harvard University and Brown both have Bitcoin exposure. Regulatory filings show that the top universities bought positions via BlackRock’s iShares Bitcoin Trust. A number of top institutions have done the same thing since the historic approval of Bitcoin ETFs. Top universities Harvard and Brown are the latest institutions to buy exposure to Bitcoin, according to regulatory filings. The Harvard Management Company, a wholly owned subsidiary of the university, has a $116 million position in BlackRock’s iShares Bitcoin Trust, a 13F form filed with the Securities and Exchange Commission shows. Not one to be left out, Brown University—which first bought exposure…

Federal agencies are on a tight deadline to update how they buy and integrate quickly evolving artificial intelligence capabilities. The Office of Management and Budget’s April 3 memo, “Driving Efficient Acquisition of Artificial Intelligence,” seeks to foster a “competitive American AI marketplace.”  By Oct. 20, agencies must update their policies laying out how they will “standardize the treatment of data ownership and IP rights in procurements for AI systems or services.” The goal, OMB says, is to clearly delineate the rights of both the government and contractor, while providing clear guidance on the handling of data. And by the end…

French firm Bouygues Telecom suffered a data breach impacting 6.4M customers Pierluigi Paganini August 08, 2025 Bouygues Telecom suffered a cyberattack that compromised the personal information of 6.4 million customers. French telecommunications company Bouygues Telecom suffered a cyberattack that resulted in the compromise of personal information of 6.4 million customers. Bouygues Telecom, part of the Bouygues industrial group, is one of France’s leading telecom providers, offering mobile, internet, and IPTV services. Founded in 1994, the company is the country’s third-oldest mobile operator. The telecom firm serves over 23 million customers and continues to invest heavily in expanding and improving its…

Cybersecurity researchers at SafeBreach Labs have uncovered a new kind of cyberattack that starts with something as ordinary as a Google Calendar invitation. According to the team, this method can be used to hijack a person’s Google Gemini AI agent, giving attackers the ability to spy on them, steal personal data, and even take control of smart home devices remotely. The research, titled “Invitation Is All You Need,” was carried out by Ben Nassi, Stav Cohen, and Or Yair. In an interview with Hackread.com, SafeBreach Labs explained that the attack relies on a new kind of threat known as Promptware.…

Over a third of companies say they are using AI, including generative AI, to fight fraud, according to Experian. As fraud threats become more complex, companies are accelerating their investments with over half adopting new analytics and building AI models to enhance customer decision-making. The AI paradox AI is playing a double role in the fight against fraud. It’s helping businesses detect threats faster, but it’s also fueling new scams like deepfakes and impersonation. Agentic AI, which can make decisions on its own, brings more efficiency to fraud detection and customer service. But it also opens the door to more…