Author: HackWatchit

The U.K. National Cyber Security Centre (NCSC) on Wednesday released Cyber Assessment Framework v4.0 (CAF v4.0) in response to the growing cyber threat landscape. The updated framework is designed to help providers of essential services strengthen their cyber risk management and resilience. It offers a structured, comprehensive approach to evaluating how effectively cyber risks to critical functions are being addressed. Assessments can be conducted internally or by an external body, such as a regulator, oversight entity, or an NCSC-assured commercial provider. CAF v4.0 introduces four major changes. It adds a new section focused on developing a deeper understanding of attacker…

Written by Shad Brown || Revised by Bronwen Aker This blog is part of Offensive Tooling Cheatsheets: An Infosec Survival Guide Resource. You can learn more and find all of the cheatsheets HERE: https://www.blackhillsinfosec.com/offensive-tooling-cheatsheets/ Wireshark Cheatsheet: PRINT-FRIENDLY PDF Find the tool here: https://www.wireshark.org/ Wireshark is an incredible tool used to read and analyze network traffic coming in and out of an endpoint. Additionally, it can load previously captured traffic to assist with troubleshooting network issues or analyze malicious traffic to help determine what a threat actor is doing on your network. Basics The most basic filtering Wireshark provides is by…

The hands-on labs were particularly helpful. They allowed me to apply what I was learning in a guided, real-world-like environment. This experience gave me greater confidence in my ability to handle incidents independently in the future. Yes, I have completed the Certified Ethical Hacker (CEH), Certified Security Analyst (CSA), and ECIH certifications. These three courses complement each other very well. CEH focuses on attack methodologies, offering deep insights into how adversaries operate, while CSA builds on CEH by emphasizing application and practical assessment of those attack techniques. ECIH, on the other hand, provides a comprehensive overview of defensive strategies, covering…

Akira ransomware affiliates are not leveraging an unknown, zero-day vulnerability in SonicWall Gen 7 firewalls to breach corporate networks, the security vendor shared today. “Instead, there is a significant correlation with threat activity related to CVE-2024-40766, which was previously disclosed and documented in our public advisory.” What happened? Since July 15, 2025, researchers have observed a notable surge in ransomware activity targeting SonicWall firewalls, specifically via their SSL VPN functionality, and posited that the attackers might be leveraging a zero-day vulnerability because, in some cases, fully patched SonicWall devices were affected following credential rotation and despite time-based one-time password (TOTP)…

Multiple ransomware vendors are using the same EDR killer tool, which not only adds to the trend in developing such payloads to terminate protections for systems but also suggests that competing threat actors are sharing tools and technical knowledge, which is another challenge for security vendors, Sophos says. The post Multiple Ransomware Groups are Using Tool to Kill EDR Defenses: Sophos appeared first on Security Boulevard.

CERT-UA warns of UAC-0099 phishing attacks targeting Ukraine’s defense sector Pierluigi Paganini August 07, 2025 Ukraine’s CERT-UA warns of phishing attacks by UAC-0099 targeting defense sectors, using malware like MATCHBOIL, MATCHWOK, and DRAGSTARE. Ukraine’s CERT-UA warns of phishing attacks by threat actor UAC-0099 targeting government and defense sectors, delivering malware like MATCHBOIL and DRAGSTARE. The National Cyber Incident, Cyber Attack, and Cyber Threat Response Team CERT-UA investigated multiple attacks against state authorities, the Defense Forces, and enterprises of the defense-industrial complex of Ukraine. The attack chain starts with phishing emails, often titled “court summons”, sent via UKR.NET. The messages contain…

Parataxis Capital is set to go public through a merger with SilverBox Corp IV in a deal that could deliver up to $640 million in capital, according to a definitive agreement announced August 7.The transaction combines $240 million in trust capital with a $400 million equity facility, and it positions the Bitcoin-focused asset manager to list under the ticker PRTX on the New York Stock Exchange.The New York-based firm, known for its digital asset strategies and Bitcoin yield-generation vehicles, has structured the deal to accelerate its direct BTC treasury operations. Per the investor presentation filed with the SEC, $31 million…

Black Hat USA 2025 was packed with innovation, with companies showing off tools built to get ahead of what’s coming next. From smarter offensive security to new ways of spotting attacks faster, the conference had no shortage of exciting developments. Here are some of the products that stood out and could play a big role in where cybersecurity goes from here. Darwinium launches AI tools to detect and disrupt adversarial threats Darwinium launched Beagle and Copilot, two new agentic AI features that simulate adversarial attacks, surface hidden vulnerabilities, and dynamically optimize fraud defenses. As fraudsters increasingly deploy AI agents to…

Air France and KLM announced on Wednesday that attackers had breached a customer service platform and stolen the data of an undisclosed number of customers. Together with Transavia, Air France and KLM are part of Air France–KLM Group, a French-Dutch multinational airline holding company founded in 2004 and a major player in international air transport. With a fleet of 564 aircraft and 78,000 employees, Air France-KLM provides services to up to 300 destinations in 90 countries. In 2024, the aviation group transported 98 million passengers worldwide. The two airlines stated that they’ve cut off the attackers’ access to the compromised…