Author: HackWatchit

Enterprise risk leaders are most concerned about rising tariffs and trade tensions heading into the second half of 2025, according to a new report from Gartner. The firm’s second-quarter Emerging Risk Report, based on a survey of 223 senior risk, audit, and compliance executives, ranks the escalating trade war as the top emerging risk, up from third in the first quarter. Top emerging risks of Q2 2025 (Source: Gartner) The quarterly report tracks over-the-horizon risks cited by ERM leaders, internal auditors, and senior executives. This quarter’s list reflects growing concern over global economic instability and the use of AI technologies,…

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Endgame Gear mouse config tool infected users with malware Auto-Color Backdoor: How Darktrace Thwarted a Stealthy Linux Intrusion Sealed Chain of Deception: Actors leveraging Node.JS to Launch JSCeal Decrypted: FunkSec Ransomware Threat actor uses AI to create a better crypto wallet drainer PlayPraetor’s evolving threat: How Chinese-speaking actors globally scale an Android RAT Plague: A Newly Discovered PAM-Based Backdoor for Linux Before ToolShell: Exploring Storm-2603’s Previous Ransomware Operations   Attackers Actively Exploiting Critical Vulnerability in Alone Theme UNC2891 Bank Heist:…

When it comes to salaries, today’s top AI talent are enjoying unprecedented paychecks. That’s according to a report Friday (Aug. 1) by Ars Technica, which cites the example of Matt Deitke, an artificial intelligence (AI) researcher offered $250 million — over four years — to bring his expertise to Meta.  Such a figure, the report said, “shattered every historical precedent” for scientific and technical compensation the publication was able to find, including the salaries of the people involved in the space race and developing the atomic bomb. For example, J. Robert Oppenheimer, head of the Manhattan Project, made $10,000 per…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) today announced the public availability of Thorium, an open-source platform for malware and forensic analysts across the government, public, and private sectors. Thorium was developed in partnership with Sandia National Laboratories as a scalable cybersecurity suite that automates many tasks involved in cyberattack investigations, and can schedule over 1,700 jobs per second and ingest over 10 million files per hour per permission group. “Thorium enhances cybersecurity teams’ capabilities by automating analysis workflows through seamless integration of commercial, open-source, and custom tools,” CISA said on Thursday. “It supports various mission functions, including software…

August is the month of “Remember that Franchise?” Aside from the annual Madden game, a lot of the games we’re looking forward to this month are returns to older franchises—one of which hasn’t seen a new entry in almost 15 years. There are a few remake/remaster-type games on this list, but our first entry, Mafia: The Old Country, is a return to the series’ roots. The new Dying Light game takes us back to the original protagonist, but in a new environment and with new powers. What’s old is new again!Overall, things are a bit light as we enter the back end…

Akira Ransomware targets SonicWall VPNs in likely zero-day attacks Pierluigi Paganini August 03, 2025 Akira ransomware targets fully patched SonicWall VPNs in suspected zero-day attacks, with multiple intrusions seen in late July 2025. Arctic Wolf Labs researchers reported that Akira ransomware is exploiting SonicWall SSL VPNs in a likely zero-day attack, targeting even fully patched devices. Arctic Wolf Labs observed multiple intrusions via VPN access in late July 2025. Evidence suggests a likely zero-day in SonicWall VPNs, as fully patched devices with MFA and rotated credentials were still compromised in some attacks. “While credential access through brute force, dictionary attacks,…

It’s often the case that the simplest tools have the longest staying power, because they ultimately get the job done. Take duct tape, for example: it’s a sturdy household classic that wasn’t invented to be elegant or high tech. It was made to work whether dealing with a leaky tent or an inconvenient puncture – a reliable way to just get the job done in a sticky situation. Stolen credentials play a similar role in a threat actor’s playbook. It’s an old method that’s still effective. When it comes to mass adoption, simplicity will always win out against sophistication. And…

The global professional association championing the workforce in advancing trust in technology worldwide, ISACA, installed its 2025-2026 Board of Directors during the association’s Annual General Meeting, held in Chicago, Illinois, and virtually. This group of top global experts in cybersecurity, IT audit, governance, privacy, and risk professions will be headed by returning board chair John De Santis and new board vice chair Jamie Norton. De Santis is a technology executive and past chairman and CEO of HyTrust, an IT infrastructure security software company that Entrust acquired in January 2021. A company-builder based in New Hampshire, USA, he has more than…

What is bossware? Whether you’re working from home or using a computer at work, your boss could be watching. Employee monitoring software can enable screen sharing, keylogging, remote monitoring, and more. Since the pandemic, employee productivity tools and time tracking software have become increasingly common. For some employees, bossware has evolved into full-blown work surveillance, resulting in significant privacy concerns. Employers now have tools to track everything from your keyboard activity and browsing history to webcam feeds and workplace apps like Slack, Microsoft Office, and Zoom. Employee monitoring tools often come preloaded in device management profiles, mobile device management (MDM)…