Author: HackWatchit

DSPM & AI Are Booming: $17.87B and $4.8T Markets by 2033 Pierluigi Paganini July 24, 2025 The DSPM market hit around $1.2 billion in 2024 and should grow to $4.5 billion by 2033 (≈16.5% CAGR). The AI sector is projected to swell from $189 billion in 2023 to $4.8 trillion by 2033. The tech realm is continually evolving. New tools are invented every day, and certain technologies are reaching market valuations that have never been seen before. This tectonic shift is notably influencing two critical sectors i.e Data Security Posture Management (DSPM) and Artificial Intelligence (AI), which are poised for significant expansion over the coming decade. According to current…

CrowdStrike has been named a Leader and Fast Mover in the 2025 GigaOm Identity Security Posture Management (ISPM) Radar Report, recognizing the power of CrowdStrike Falcon® Identity Protection to detect and stop today’s identity-based threats. Identity compromise is among the most common, easily conducted, and potentially damaging vectors for cyberattacks as adversaries target on-premises, cloud, and hybrid identities. In 2024, 79% of detections CrowdStrike observed were malware-free, indicating adversaries are using hands-on-keyboard techniques to blend in with legitimate user activity and impede detection. Access broker advertisements, which often sell valid credentials, were up 50% year-over-year, and valid account abuse accounted…

Sonicwall is asking customers running specific Secure Mobile Access (SMA) 100 Series devices to patch a newly uncovered vulnerability (CVE-2025-40599) as soon as possible. “While there is currently no evidence that this vulnerability is being actively exploited in the wild,” Sonicwall is advising organizations using SMA 210, 410 or 500v appliances to check whether they have been compromised in a recently disclosed ongoing campaign delivering the OVERSTEP backdoor to end-of-life SMA devices. The attack campaign, unearthed and documented by Google’s incident responders and threat intelligence analysts, has been going on for at least six months. Google’s security experts have been…

Vibe coding is here. And it’s not just a fad — it’s reshaping how we build, deploy and even conceive of software. But unless we hit the brakes and bake in security now, we’re setting ourselves up for another generation of vulnerabilities, exploits and blame games. The post The “S” in Vibe Coding Stands for Security appeared first on Security Boulevard.

Solana developers have increased the network’s block limit from 50 million to 60 million compute units (CUs), marking a move to support higher transaction volumes and improve overall performance.Helius Labs CEO Mert Mumtaz announced the update on July 23, representing a 20% expansion in block capacity.According to Mumtaz, compute units on Solana function like fuel for a vehicle, as each transaction consumes a certain number of CUs depending on its complexity. For instance, a basic token transfer uses fewer CUs than a multi-swap operation across decentralized exchanges.This upgrade is part of a broader effort to address execution constraints observed during…

The Cybersecurity for Energy Resilience Summit (CyFERS) brought together more than 80 participants from 40 states for three days of collaboration. Hosted by the Department of Energy’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER), the summit convened state leaders, energy sector representatives, and national lab experts to strengthen partnerships and advance energy security nationwide. Held in Salt Lake City, CyFERS provided a platform for state officials to deepen their understanding of evolving cyber threats through sessions dedicated to threat intelligence and information sharing. Participants discussed the intersection of cyber and physical risks methodologies and participated in hands-on cyber…

A Chinese hacking group is deploying Warlock ransomware on Microsoft SharePoint servers vulnerable to widespread attacks targeting the recently patched ToolShell zero-day exploit chain. Tracked as Storm-2603, these China-based threat actors were also previously linked by Microsoft researchers to Lockbit ransomware attacks. “Microsoft tracks this threat actor in association with attempts to steal MachineKeys using the on-premises SharePoint vulnerabilities,” the company said in a Wednesday report. “Starting on July 18, 2025, Microsoft has observed Storm-2603 deploying ransomware using these vulnerabilities.” After breaching the victims’ networks, Storm-2603 operators use the Mimikatz hacking tool to extract plaintext credentials from LSASS memory. They…

Autoswagger is a free, open-source tool that scans OpenAPI-documented APIs for broken authorization vulnerabilities. These flaws are still common, even at large enterprises with mature security teams, and are especially dangerous because they can be exploited with little technical skill. Autoswagger begins by detecting API schemas across a range of common formats and locations, starting with a list of an organization’s domains. It scans for OpenAPI and Swagger documentation pages, sending requests to each host to locate valid schemas. Once identified, it parses the API specifications and automatically generates a list of endpoints to test, taking into account each endpoint’s…

Earlier this morning, it was reported that on 22 July 2025, Ukraine arrested a man suspected of being the administrator of XSS.IS, one of the world’s most notorious and sophisticated cybercrime platforms. The arrest was made with the assistance of Europol and French authorities. Now, as seen by Hackread.com, the forum itself has also been seized. Visitors to XSS.IS now see a seizure notice stating, “This domain has been seized by la Brigade de Lutte Contre la Cybercriminalité with assistance from the SBU Cyber Department.” The seizure notice on XSS.IS (Image credit: Hackread.com) The “SBU Cyber Department” refers to the…