Author: HackWatchit

OPSWAT, a global critical infrastructure protection company, published its inaugural ‘2025 OPSWAT Threat Landscape Report’ on Wednesday, offering a deep dive into over 890,000 sandbox scans conducted in the past year, disclosing that adversaries are innovating faster than static defenses can adapt. The report recognizes that attacks on operational technology (OT) and critical infrastructure have continued their upward trajectory in 2025. Sectors such as manufacturing, energy, and utilities remain at the forefront of threat actor targeting, with financial and espionage motivations both in play.  The findings reveal a 127% surge in malware complexity over just six months, measured through multi-stage…

In a recent revelation, Google has confirmed that one of its internal databases was breached by a well-known cybercriminal organization. The Google Threat Intelligence Group (GTIC), which was already investigating the activities of the group known as ShinyHunters (or UNC6040), disclosed that its own Salesforce database was accessed in June. The attack exposed information belonging to Google’s small and medium-sized business clients. The company stated that the breach was contained quickly, and the hackers had access for only a “small window of time.” The stolen data was described as “basic and largely publicly available,” consisting of business names, contact details,…

Written by BB King || Reviewed by Chris Traynor This blog is part of Offensive Tooling Cheatsheets: An Infosec Survival Guide Resource. You can learn more and find all of the cheatsheets HERE: https://www.blackhillsinfosec.com/offensive-tooling-cheatsheets/ Burp Suite Cheatsheet: PRINT-FRIENDLY PDF Find the tool here: https://portswigger.net/burp Burp Suite is an intercepting HTTP proxy that can also scan a web-based service for vulnerabilities. A tool like this is indispensable for testing web applications. Burp Suite is written in Java and comes bundled with a JVM, so it works on any operating system you’re likely to use. It comes in a free Community version…

A global survey of 2,000 senior security decision-makers in organizations with between 50 and 2,000 employees finds well over a third (38%) of those who were impacted by a data breach caused by a ransomware attack were victimized multiple times in the last 12 months. Conducted by the market research firm Vanson Bourne on behalf.. The post Survey: Many Organizations Hit by Ransomware Fall Victim Multiple Times appeared first on Security Boulevard.

OpenAI has released GPT‑5, the newest version of its large language model. It’s now available to developers and ChatGPT users, and it brings some real changes to how AI can be used in business and IT environments. GPT‑5 (with thinking) performs better than OpenAI o3 with 50-80% less output tokens across capabilities, including visual reasoning, agentic coding, and graduate-level scientific problem solving (Source: Open AI) Unlike previous versions, GPT‑5 uses a new approach behind the scenes. Instead of making users choose different models based on speed or accuracy, GPT‑5 decides on the fly how to respond. If a task is…

Can Real Estate Finally Be Tokenized at Scale? Mavryk and Fireblocks Say Yes What would it take to tokenize real estate at a billion-dollar scale and actually have institutions use it? That is the question Mavryk Network is attempting to answer. Its recent integration with Fireblocks is positioned as a step toward that outcome, connecting infrastructure for compliant real world asset (RWA) issuance with institutional custody solutions. The collaboration brings together three key players: Mavryk, a Layer-1 blockchain focused on RWAs, Fireblocks, a custody platform with over $100 billion in assets secured, and MultiBank.io, a regulated trading venue. The result…

CISA, Microsoft warn of critical Exchange hybrid flaw CVE-2025-53786 Pierluigi Paganini August 07, 2025 CISA and Microsoft warn of CVE-2025-53786, a high-severity Exchange flaw allowing privilege escalation in hybrid cloud environments. CISA and Microsoft warn of a high-severity flaw, tracked as CVE-2025-53786, in Exchange hybrid deployments that allows attackers to escalate privileges in cloud setups. Microsoft address the vulnerability in Exchange Server 2016, 2019 and Subscription Edition RTM. The Tech giant highlights that successful exploitation of this vulnerability requires an attacker to first gain or possess administrator access on an Exchange Server. “In an Exchange hybrid deployment, an attacker who…

SonicWall says that recent Akira ransomware attacks exploiting Gen 7 firewalls with SSLVPN enabled are exploiting an older vulnerability rather than a zero-day flaw. The company says that the attackers are targeting CVE-2024-40766, an unauthorized access flaw fixed in August 2024. “We now have high confidence that the recent SSLVPN activity is not connected to a zero-day vulnerability,” reads the update on the SonicWall bulletin published this week. “Instead, there is a significant correlation with threat activity related to CVE-2024-40766, which was previously disclosed and documented in our public advisory SNWLID-2024-0015.” CVE‑2024‑40766 is a critical SSLVPN access control flaw in…

For years, email was the main security battleground. Phishing, scams, and account takeovers were problems companies knew how to fight—at least in theory. Secure email gateways, AI-driven detection, relentless user training. We built entire industries around stopping bad emails from reaching inboxes. But now? Attackers don’t even need your inbox. They’ve moved to the communication and networking platforms businesses rely on every day. Places where users trust too much and security teams think too little. Here’s the truth: The way people work has changed. Collaboration is real-time, fluid, and decentralized. But security hasn’t kept up. Most organizations still defend like…