Author: HackWatchit

AI is transforming business processes and the threat landscape. CrowdStrike is expanding our AI Security Services portfolio to help organizations meet the dual challenges of securing their AI systems and effectively integrating AI into security operations. Enterprises are adopting large language models (LLMs), copilots, and agentic tools, all of which introduce new risks: shadow AI, misconfigurations, and autonomous agents that act as non-human identities and operate with privileged access. All the while, adversaries are using AI to their advantage. The newly released CrowdStrike 2025 Threat Hunting Report explores how threat actors are targeting software used to build AI agents and…

On July 22, 2025, the European police agency Europol said a long-running investigation led by the French Police resulted in the arrest of a 38-year-old administrator of XSS, a Russian-language cybercrime forum with more than 50,000 members. The action has triggered an ongoing frenzy of speculation and panic among XSS denizens about the identity of the unnamed suspect, but the consensus is that he is a pivotal figure in the crime forum scene who goes by the hacker handle “Toha.” Here’s a deep dive on what’s knowable about Toha, and a short stab at who got nabbed. An unnamed 38-year-old man…

A new post-exploitation command-and-control (C2) evasion method called ‘Ghost Calls’ abuses TURN servers used by conferencing apps like Zoom and Microsoft Teams to tunnel traffic through trusted infrastructure. Ghost Calls uses legitimate credentials, WebRTC, and custom tooling to bypass most existing defenses and anti-abuse measures, without relying on an exploit. This new tactic was presented by Praetorian’s security researcher Adam Crosser at BlackHat USA, where it was highlighted that the new technique can be used by Red Teams when performing penetration emulation exercises. “We leverage web conferencing protocols, which are designed for real-time, low-latency communication and operate through globally distributed…

MEV. Maximal Extractable Value. In the world of Web3, this phrase became well-known among crypto traders, Web3 developers, and security experts, and each has their own opinion on how to use this approach and whether it should be used at all.Recently, our RPC node provider GetBlock added MEV-protection to its most used nodes, so it’s time to explore this topic deeper. For everybody who wants to try it out—just sign up, select the most suitable subscription plan, and create the appropriate Solana, Ethereum, BSC, or Base endpoint. But now, let’s focus on MEV!Originally known as miner extractable value, it refers…

GPT-4o-based agents led by a human collaborated to develop experimentally validated nanobodies against SARS-CoV-2. Discover with me how we are entering the era of automated reasoning and work with actionable outputs, and let’s imagine how this will go even further when robotic lab technicians can also carry out the wet lab parts of any research project! In an era where artificial intelligence continues to reshape how we code, write, and even reason, a new frontier has emerged: AI conducting real scientific research, as several companies (from major established players like Google to dedicated spin offs) are trying to achieve. And…

Skip to the cheatsheets! How and Why This Was Made The Infosec Survival Guide continues to be an experiment. The first edition resulted in more of an explanation of our services and how they were helpful. The second edition—now known as the “Yellow Book”—was our attempt to create something with more direct value for readers. That direction continued with the “Green Book,” which covered a range of varying topics to help infosec professionals get started, learn more, and find reliable jumping-off points into new areas. It wasn’t meant to be exhaustive, but to offer foundational knowledge and point toward helpful…

Austin, TX, USA, August 6th, 2025, CyberNewsWire SpyCloud Investigations, now with AI Insights, empowers security teams to act decisively with finished intelligence built from billions of breach, malware, and phishing records. SpyCloud, the leader in identity threat protection, today announced a significant enhancement to its SaaS Investigations solution: the integration of advanced AI-powered insights that mirror the tradecraft of SpyCloud’s seasoned investigators. Building on the foundation of its industry-leading IDLink identity analytics, this new capability further automates and accelerates complex cybercrime investigations, empowering security operations, cyber threat intelligence, and fraud & risk prevention teams to uncover critical findings faster than…

The modern workforce operates beyond traditional boundaries. Contractors use their own laptops, and hybrid employees embrace BYOD, to access critical systems with devices IT never touches. This flexibility powers business agility, but it also creates a massive security blind spot. How do you secure what you don’t control? Enter the Check Point Enterprise Browser. It’s a Chromium-based browser that extends Zero Trust security to any unmanaged device, securing access without sacrificing user experience. The Unmanaged Device Dilemma For security teams, unmanaged devices present a difficult equation. Consider these common scenarios: A third-party developer needs temporary access to an internal database…

Grand odyssey of CMMC nearing implementation The CMMC requirements will likely become a reality this fall. The Cyber Accreditation Body is focused on scaling up assessors to meet the future demand. Justin Doubleday@jdoubledayWFED August 5, 2025 4:41 pm 3 min read The Cybersecurity Maturity Model Certification requirements are inching closer to a reality, and the organization that oversees CMMC assessors is gearing up for contract requirements that are likely to launch later this year. The Defense Department submitted the final CMMC acquisition rule to the White House Office of Information and Regulatory Affairs on July 22. OIRA has between 90…