Author: HackWatchit
Key Findings – Q2 2025 Ransomware Trends Ransomware-as-a-Service (RaaS) group disruptions: Several major ransomware groups have disappeared, leaving a fragmented ecosystem. Slight decline in public victim extortion: Fewer victims were named on data leak sites this quarter, likely due to law enforcement pressure and changing attacker tactics. Continuous shift toward data extortion: Attackers continue moving away from encryption, focusing instead on stealing and leaking data to force payment. Ransomware group Qilin leads with new extortion tools: Qilin was the most active group in Q2, using innovative methods to pressure victims and boost ransom payments. In Check Point Research’s latest Ransomware…
Twitter (X) is rolling out age verification requirements for users who want to access NSFW or other restricted content. In this guide, we show you how to bypass Twitter (X) age verification. If you live in the UK or the EU, you could be asked to complete a Twitter ID upload or use the selfie age estimation feature to confirm your age. These new Twitter identification steps follow child protection laws, including the Online Safety Act in the UK and emerging regulations in the EU (France, Germany, and more). Twitter introduced these adult identification requirements to comply with safety regulations,…
Microsoft has expanded its .NET bug bounty program and increased rewards to $40,000 for some .NET and ASP.NET Core vulnerabilities. Madeline Eckert, a senior program manager for Researcher Incentives and Bounty at Microsoft, stated that these changes aim to more accurately reflect the complexity involved in discovering and exploiting .NET vulnerabilities. “We’re excited to announce significant updates to the Microsoft .NET Bounty Program. These changes expand the program’s scope, simplify the award structure, and offer great incentives for security researchers,” said Eckert. “The .NET Bounty Program now offers awards up to $40,000 USD for vulnerabilities impacting the .NET and ASP.NET…
Topic: Next-Gen VAPT: Integrating AI for Faster and Smarter Assessments Watch Now Abstract: As the cybersecurity landscape continues to evolve with more advanced and AI-driven threats, traditional Vulnerability Assessment and Penetration Testing (VAPT) methods are struggling to keep pace. To stay ahead, security teams must embrace artificial intelligence (AI) and machine learning (ML) technologies to enhance their VAPT capabilities. A next-generation VAPT approach not only automates threat detection and mitigation but also leverages AI for smarter threat analysis and scalable security across diverse environments. This webinar explores the growing need for advanced VAPT controls and the techniques involved in developing and…
GreyNoise Intelligence introduced three new platform capabilities designed to help security teams detect, block and respond faster to emerging cybersecurity threats. These capabilities, including Real-time Dynamic Blocklists, new GreyNoise feeds and integrations for Security Orchestration, Automation and Response (SOAR), empower security teams with the levels of velocity and precision required to combat automated cyberattacks. “Widespread use of AI agents and other advanced technologies has fundamentally changed the modern cyber threat landscape by making it possible to orchestrate fully automated cyber attacks in minutes,” said Ash Devata, CEO, GreyNoise. “Unfortunately, for most security teams, information about emerging threats usually arrives too…
For a security analyst, the day begins and ends in the Sumo Logic Cloud SIEM. It’s the central hub for unifying security and observability data, designed to turn a firehose of enterprise-wide events into clear, actionable Insights. But the platform’s AI-driven analytics are only as good as the data they receive. When an alert for a potential web application attack appears, it is often vague and stripped of context. What follows is a frantic, manual investigation that can stretch on for hours as analysts scramble for answers: Is this a real threat or just another benign probe? Which of the…
In brief Bitcoin whales holding 10-10,000 BTC accumulated 0.9% of the total supply over four months, including 30,000 BTC over the past 48 hours. Despite whale buying, large-scale profit-taking occurred with one whale offloading $9 billion worth of Bitcoin through Galaxy Digital. Whales are expanding beyond Bitcoin into Ethereum, Solana, and select memecoins while the crypto market cap hovers around $3.44 trillion. Bitcoin whales holding between 10 and 10,000 BTC accumulated 0.9% of the total supply over the past four months, according the crypto market analytics platform Santiment.That bumps up to a full 1% when you consider that there’s 19,899,417…
Researchers released a decryptor for the FunkSec ransomware Pierluigi Paganini July 31, 2025 Researchers have released a decryptor for the ransomware FunkSec, allowing victims to recover their encrypted files for free. Researchers at Avast developed a decryptor for the FunkSec ransomware. Gen Digital researchers released a decryptor for the FunkSec ransomware after cooperating with law enforcement to neutralize the threat. “Researchers at Avast developed a decryptor for the FunkSec ransomware. We have been cooperating with law-enforcement agencies to help victims decrypt files for free. Because the ransomware is now considered dead, we released the decryptor for public download.” reads Gen…
CMMC readiness: Top 3 disruptions affecting the Defense Industrial Base Engage a CMMC certified professional or assessor, or at least assess your contracts and clarify CUI expectations with your contracting officer. Thomas Graham July 29, 2025 2:37 pm 4 min read The finalization of the Cybersecurity Maturity Model Certification (CMMC) rule marks a shift in how Defense Industrial Base (DIB) contractors engage with the Defense Department. Yet a recent survey paints a concerning picture: More than 16% of respondents reported little to no readiness for CMMC compliance, half admitted to being only moderately or slightly prepared, and 13% said they’d…