Author: HackWatchit

The traditional landscape of commodity investment has long been characterized by high barriers to entry, limited accessibility, and opaque market structures. For an asset like physical uranium, requiring minimum investments of 100,000 pounds (approximately $7.2 million USD) and specialized broker relationships, participation has been largely restricted to institutional players and large corporations. However, a recent development has introduced a new paradigm. The xU3O8 token represents fractional ownership of physical uranium ore concentrate, also known as yellowcake, which is held in regulated facilities by Cameco. This innovative approach aims to dismantle the long-standing barriers that have historically kept individual investors and…

SonicWall fixed critical flaw in SMA 100 devices exploited in Overstep malware attacks Pierluigi Paganini July 24, 2025 SonicWall addressed a critical vulnerability, tracked as CVE-2025-40599 (CVSS score of 9.1), in SMA 100 appliances SonicWall addressed a critical vulnerability, tracked as CVE-2025-40599 (CVSS score of 9.1), in SMA 100 appliances. Experts warn customers to check their installs for Indicators of Compromise (IoCs) associated with Overstep malware attacks. The issue is an authenticated arbitrary file upload vulnerability in the web management interface of impacted devices. “An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A…

OT-ISAC warned that Singapore’s critical infrastructure is under active cyberattack by UNC3886, a state-sponsored threat group tied to Chinese espionage operations. The group is exploiting zero-day vulnerabilities in Fortinet, VMware, and Juniper systems to gain stealthy, long-term access. Its targets span energy, water, telecommunications, finance, and government services, with tactics that include custom malware and advanced persistence techniques. In an alert this week, OT-ISAC provided critical context on UNC3886, detailing its tactics, potential impact, and clear steps for defense. Given the group’s strategic intent and technical sophistication, swift, coordinated action is essential to prevent cascading operational disruptions. First identified by…

Cisco just captured cybersecurity’s Olympic gold again! Our Secure Firewall 4225 is the first firewall ever to earn SE Labs’ coveted AAA rating in the ultra-tough Advanced Performance test, hot on the heels of its February AAA rating for efficacy. This dual recognition underscores a powerful truth: blazing speed combined with impeccable protection creates a champion designed to keep even the most sophisticated threats on the sidelines.  To understand the magnitude of this achievement, it’s important to know how SE Labs structures its evaluations:  Certification: Basic validation of core security capabilities and essential industry standards.  Evaluation: More in-depth efficacy testing…

Business leaders evaluating artificial intelligence (AI) solutions should be cautious about assuming that larger generalist models such as OpenAI’s ChatGPT will always deliver better results than specialist models, according to an analysis published this week by Harvard Business Review.  While large language models (LLMs) such as ChatGPT, Claude and Gemini perform well in general tasks that call for getting information from a wide variety of sources — such as customer service — they don’t do as well as AI models customized for specific industries in domain-specific tasks. This might seem obvious, but it pans out in practice. That’s the experience…

A threat actor called EncryptHub has compromised a game on Steam to distribute info-stealing malware to unsuspecting users downloading the title. A few days ago, the hacker (also tracked as Larva-208), injected malicious binaries into the Chemia game files hosted on Steam. Chemia is a survival crafting game from developer ‘Aether Forge Studios,’ which is currently offered as early access on Steam but has no public release date. Chemia on SteamSource: BleepingComputer titled Chemia  , also tracked as ‘,’ Fickle Stealer and HijackLoader malware on unsuspecting players who downloaded the title. According to threat intelligence Prodaft, the initial compromise occurred on…

One of the groups that, in the past few weeks, has been exploiting vulnerabilities in on-prem SharePoint installation has been observed deploying Warlock ransomware, Microsoft shared on Wednesday. First attack spotted on July 7th On Saturday, Microsoft announced that attackers have been spotted exploiting a zero-day variant (CVE-2025-53770) of a SharePoint vulnerability (CVE-2025-49706) that the company partially addressed with updates released on July 8th, 2025. In the intervening days, some things have become clearer but other murkier. For example, despite still saying it’s CVE-2025-53770 that is being exploited, the company’s blog post that pins the attacks on various Chinese threat…

On July 23, 2025, as reported by Hackread.com, the cybercrime community lost one of its oldest and most notorious forums, XSS, after law enforcement authorities seized the site and arrested its suspected administrator in Ukraine. The arrest led to the seizure of the forum’s main domain, XSS.IS, which now displays a notice from Europol, French and Ukrainian authorities. However, the forum’s dark web (.onion) and mirror domains did not show a seizure notice but instead returned a 504 Gateway Timeout error. As of July 24, Hackread.com can confirm that the XSS forum is back online via both its mirror and…

is a relatively new sub-field in AI, focused on understanding how neural networks function by reverse-engineering their internal mechanisms and representations, aiming to translate them into human-understandable algorithms and concepts. This is in contrast to and further than traditional explainability techniques like SHAP and LIME. SHAP stands for SHapley Additive exPlanations. It computes the contribution of each feature to the prediction of the model, locally and globally, that is for a single example as well as across the whole dataset. This allows SHAP to be used to determine feature importance in general for the use case. LIME, meanwhile, works on…