Author: HackWatchit

Most organizations still miss basic identity security controls in the cloud, leaving them exposed to breaches, audit failures, and compliance violations. A new midyear benchmark from Unosecur found that nearly every company scanned had at least one high-risk issue, with an average of 40 control failures per organization. Top compliance violations and business impact (Source: Unosecur) The report analyzed diagnostic scan data from 50 enterprises across industries and regions between January and June 2025. Unlike survey-based studies, the findings are based on direct control checks aligned with standards like ISO 27001/27002, PCI DSS, and SOC 2. The goal: provide a…

A security vulnerability recently surfaced involving Amazon’s AI coding assistant, ‘Q’, integrated with VS Code. The incident, reported by 404 Media, revealed a lapse in Amazon’s security protocols, allowing a hacker to insert malicious commands into a publicly released update. The hacker, using a temporary GitHub account, managed to submit a pull request that granted them administrative access. Within this unauthorised update, destructive instructions were embedded, directing the AI assistant to potentially delete user files and wipe clean Amazon Web Services (AWS) environments. Despite the severe nature of these commands, which were also intended to log the actions in a…

Executive Summary Unit 42 has tracked and responded to several waves of intrusion operations conducted by the cybercrime group we track as Muddled Libra (aka Scattered Spider, UNC3944) across different sectors in recent months. This article contains observations on Muddled Libra thus far in 2025 based on our incident response insights. We share defensive recommendations that we have seen organizations use successfully against the threat. We also include what’s likely next for this prolific adversary. Muddled Libra’s recent activity follows a series of international law enforcement operations aimed at disrupting the threat group in mid-to-late 2024, including federal charges levied…

Beginning today, millions of adults trying to access pornography in the United Kingdom will be required to prove that they are over the age of 18. Under sweeping new online child safety laws coming into force, self-reporting checkboxes that allow anyone to claim adulthood on porn websites will be replaced by age-estimating face scans, ID document uploads, credit card checks, and more. Some of the biggest porn websites—including Pornhub and YouPorn—have said that they will comply with the new rules. And social media sites like BlueSky, Reddit, Discord, Grindr, and X are introducing UK age checks to block children from…

Clorox is suing IT giant Cognizant, claiming their help desk handed over employee passwords to hackers — no phishing, no malware… just gave them away. The post “Bleach Wasn’t Strong Enough: Clorox Sues Cognizant After Help Desk Allegedly Gave Away Passwords to Hackers” appeared first on Security Boulevard.

Bitcoin has fallen sharply over the past 24 hours, dipping nearly 3% to around $115,376, its lowest point in two weeks.According to CryptoSlate’s data, the decline follows a recent peak of around $119,291 on July 24, wiping out close to $4,000 in value during the past day.The sudden drop is likely tied to large Bitcoin holders taking generational profits.Blockchain analysis platform Lookonchain reported that asset management firm Galaxy Digital shifted close to 30,000 BTC from its wallets in a single day.According to the blockchain firm, most coins, at least $1.15 billion in Bitcoin, were sent to centralized exchanges such as Binance…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued four new industrial control systems (ICS) advisories, one medical device cybersecurity alert, and an update to a previous ICS advisory addressing hardware vulnerabilities in Honeywell, Medtronic, Mitsubishi, LG, and Network Thermostat devices deployed across the critical infrastructure sector. The notices outline current vulnerabilities, threat activity, and mitigation steps. CISA is urging asset owners and operators to review the technical details and apply recommended protections. In an advisory, CISA disclosed the presence of an ‘Uncontrolled Search Path Element’ vulnerability in Mitsubishi Electric’s CNC Series equipment used in the global critical…

Introduction: Why grayscale images might affect anomaly detection. Anomaly detection, grayscale images: Quick recap on the two main subjects discussed in this article. Experiment setting: What and how we compare. Performance results: How grayscale images affect model performance. Speed results: How grayscale images affect inference speed. Conclusion 1. Introduction In this article, we’ll explore how grayscale images affect the performance of anomaly detection models and examine how this choice influences inference speed. In computer vision, it’s well established that fine-tuning pre-trained classification models on grayscale images can lead to degraded performance. But what about anomaly detection models? These models do…

Mitel patches critical MiVoice MX-ONE Auth bypass flaw Pierluigi Paganini July 25, 2025 Mitel addressed a critical MiVoice MX-ONE flaw that could allow an unauthenticated attacker to conduct an authentication bypass attack. A critical authentication bypass flaw (CVSS score of 9.4) in Mitel MiVoice MX-ONE allows attackers to exploit weak access controls and gain unauthorized access to user or admin accounts. “An authentication bypass vulnerability has been identified in the Provisioning Manager component of Mitel MiVoice MX-ONE, which if successfully exploited could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper access control.” reads the advisory…