Author: HackWatchit

Cyber attackers are finding new ways in through the overlooked and unconventional network corners. Forescout’s 2025H1 Threat Review reveals a surge in advanced tactics, with zero-day exploits up 46 percent and ransomware attacks averaging 20 per day. Based on an analysis of over 23,000 vulnerabilities and 885 threat actors across 159 countries, the report shows adversaries are increasingly targeting non-traditional equipment like edge devices, IP cameras, and BSD servers. These footholds often enable lateral movement across IT, OT, and IoT environments, allowing attackers to reach deeper into networks and compromise critical systems. “We’re seeing attackers gain initial access through overlooked…

Xona, a provider of secure access for critical infrastructure, announced on Tuesday the general availability of Xona Platform v5.4.2, a major update that extends centralized control, unified policy enforcement, and scalable auditability across globally distributed operational environments. Building on its foundation of secure, zero-trust access for OT (operational technology), IT, and hybrid networks, Xona’s v5.4.2 release introduces new Xona Centralizer management features to extend existing enterprise-grade visibility and control across multiple Xona deployments. Combined with cross-gateway access groups, expanded identity provider support, and enhanced session governance, the release equips critical infrastructure organizations to scale secure access without adding complexity or…

Danish jewelry giant Pandora has disclosed a data breach after its customer information was stolen in the ongoing Salesforce data theft attacks. Pandora is one of the largest jewellery brands in the world, with 2,700 locations and over 37,000 employees. “We are writing to inform you that your contact information was accessed by an unauthorized party through a third-party platform we use,” reads a Pandora data breach notification sent to customers. “We stopped the access and have further strengthened our security measures.” As first reported by Forbes, only customers’ names, birthdates, and email addresses were stolen in the attack. Passwords,…

Microsoft is working on a AI agent whose main goal is autonomous malware detection and the prototype – dubbed Project Ire – is showing great potential, the company has announced on Tuesday. Tested on a dataset of known malicious and benign Windows drivers, Project Ire has correctly identified the nature of 90% of all files, and flagged only 2% of benign files as threats, the group of researchers and engineers working on it noted. In another test, involving nearly 4,000 files that automated systems at Microsoft could not classify at the time and haven’t been manually reviewed by expert reverse…

, I shared a few lessons that would have made my ML journey smoother. Writing that previous article started as a reflection while lying on a beach somewhere along the Mediterranean Sea, away from the noise of daily work. It turns out, space, silence, and sea have a way of bringing up a list of things that I wish I had known before starting ML. This article is part two of that list. In my previous article, I discussed that (1) doing ML primarily means preparing, (2) papers are like sales pitches, (3) bug fixing is the way forward, and…

Sam Altman’s blowtorch to his competitors is so hot, it even includes a new partnership with Amazon Web Services. As OpenAI announced two open-weight reasoning models with capabilities on par with its o-series, Amazon announced that the new models would become available on AWS on Tuesday. This is the first time that OpenAI models will be offered by AWS, the company confirmed to TechCrunch. They will be available as a model choice with Amazon AI services Bedrock and SageMaker AI. While anyone can download the models via Hugging Face, Amazon is offering these models with OpenAI’s full knowledge and approval,…

CrowdStrike is announcing a native integration between CrowdStrike Falcon® Shield SaaS security and the OpenAI ChatGPT Enterprise Compliance API, adding visibility and security posture capabilities for mutual customers’ ChatGPT Enterprise environments. This integration helps security teams inventory and monitor AI agents across their organization — including who created them, what they access, and how they’re shared — so teams can consistently apply existing security controls. As enterprises embrace generative AI, Falcon Shield centralizes visibility and control alongside ChatGPT Enterprise’s built-in security and admin features — supporting governance requirements for GPT-based agents without slowing down innovation. Managing the Growth of AI…

Introduction Software development has changed dramatically in recent years. Developers have moved from copying code from Stack Overflow to using ChatGPT for code suggestions, using Integrated Development Environments (IDEs) with AI-powered autocompletion, to now prompting large language models (LLMs) to generate entire applications. This shift is transforming how engineering teams work and is reshaping the economics of software creation and cybersecurity. In this article, I’ll explore how AI is shaping code editors, generators, and developer workflows. I’ll examine the landscape of AI coding tools, the forces driving their evolution, and the implications of these changes—from democratizing development to addressing cybersecurity…

When was the last time you revisited your organization’s email security practices? Is your current software up to the task of defending your data against newer and more sophisticated cyber attacks? And is your team armed with the information and education needed to respond if it isn’t? These are questions that are taking on greater significance as advancing technology increases our susceptibility to phishing attacks. Phishing is one of the most prevalent forms of email attack, accounting for 33.3 % of cases. So organizations need to do more to combat it. Most of us depend on email for business, personal correspondence, and…