Author: HackWatchit

Attackers wielding the Akira ransomware and possibly a zero-day exploit have been spotted targeting SonicWall firewalls since July 15, 2025. “In the intrusions reviewed, multiple pre-ransomware intrusions were observed within a short period of time, each involving VPN access through SonicWall SSL VPNs,” Arctic Wolf researchers have warned. Though they haven’t yet ruled out the possibility of the attackers achieving initial access to the devices through brute force, dictionary attacks and credential stuffing, there is evidence that points to the existence and exploitation of a zero-day vulnerability. “In some instances, fully patched SonicWall devices were affected following credential rotation. Despite…

The U.S. National Institute of Standards and Technology (NIST), through its National Cybersecurity Center of Excellence (NCCoE), has released the second public draft of NIST Internal Report 8536, Supply Chain Traceability: Manufacturing Meta-Framework. The effort supports U.S. manufacturers in securing their supply chains by developing a reference implementation that demonstrates how to exchange component traceability data securely across distributed ecosystems. The meta-framework enhances end-to-end supply chain traceability by organizing, linking, and querying traceability data across diverse manufacturing environments. It enables stakeholders to verify product provenance, fulfill external obligations, including legal, contractual, and operational, and strengthen supply chain integrity. Built on…

China Presses Nvidia Over Alleged Backdoors in H20 Chips Amid Tech Tensions Pierluigi Paganini August 02, 2025 China questioned Nvidia over suspected backdoors in its H20 chips, adding to rising tensions in the tech fight between the U.S. and Beijing. China’s internet watchdog has summoned Nvidia over concerns that its H20 AI chips may contain hidden backdoors. Nvidia H20 chips are AI GPUs tailored for the Chinese market, based on Hopper architecture. They deliver strong AI performance but with reduced features to comply with U.S. export controls, balancing China’s AI demands and geopolitical restrictions. This comes just after the U.S.…

In this Help Net Security interview, Marc Frankel, CEO at Manifest Cyber, discusses how overlooked AI-specific risks, like poisoned training data and shadow AI, can lead to security issues that conventional tools fail to detect. He explains how AI Bills of Materials (AIBOMs) extend SBOMs to provide transparency into datasets, model weights, and third-party integrations, improving governance and incident response. Frankel also outlines the steps organizations must take to achieve executive-grade visibility and maintain AI supply chain hygiene. Can you walk us through a real-world example where AI-specific risks, such as poisoned training data, model drift, or shadow AI use,…

Unmanaged machine identities have continued to tick up at a rapid clip, furthering a trend that finds non-human identities (NHIs) outpacing human accounts — and, to the chagrin of security experts, exposing credentials, new research on the first half of 2025 reveals.  The post NHIs Continue to Outpace Human Identities and Bump Up Security Risk  appeared first on Security Boulevard.

A new framework for global cybersecurity collaboration “We need to have a central coordinating function and to make sure that the left hand is talking to the right,” said Leopold Wildenauer. Terry Gerton July 31, 2025 3:42 pm 6 min read Guest: Leopold Wildenauer Title: Director of Policy for Cybersecurity and Supply Chain, ITI Summary: Cyber threats are borderless; they can originate anywhere and affect anywhere. A new set of global principles from industry group ITI suggests that cybersecurity should be borderless, or global, as well. The Federal Drive with Terry Gerton provides expert insights on current events in the…

Disclosure: This is a sponsored post. Readers should conduct further research prior to taking any actions. Learn more ›Geneva, Switzerland – August 3, 2025 –  Justin Sun, founder of TRON, successfully completed a historic journey to space aboard Blue Origin’s 14th human spaceflight and the 34th flight for the New Shepard program. With the successful completion of this mission, Sun becomes the youngest Chinese-born commercial astronaut and the first entrepreneur from the cryptocurrency industry featured on the cover of Forbes to reach space.“For this mission we waited four years, but we finally delivered. I really appreciate Mr. Bezos and his…

A threat actor has been abusing link wrapping services from reputed technology companies to mask malicious links leading to Microsoft 365 phishing pages that collect login credentials. The attacker exploited the URL security feature from cybersecurity company Proofpoint and cloud communications firm Intermedia in campaigns from June through July. Some email security services include a link wrapping feature that rewrites the URLs in the message to a trusted domain and passes them through a scanning server designed to block malicious destinations. Legitimizing phishing URLs Cloudflare’s Email Security team discovered that the adversary legitimized the malicious URLs after compromising Proofpoint and…

Enterprise risk leaders are most concerned about rising tariffs and trade tensions heading into the second half of 2025, according to a new report from Gartner. The firm’s second-quarter Emerging Risk Report, based on a survey of 223 senior risk, audit, and compliance executives, ranks the escalating trade war as the top emerging risk, up from third in the first quarter. Top emerging risks of Q2 2025 (Source: Gartner) The quarterly report tracks over-the-horizon risks cited by ERM leaders, internal auditors, and senior executives. This quarter’s list reflects growing concern over global economic instability and the use of AI technologies,…