Author: HackWatchit

Email remains one of the most frequent and vulnerable attack vectors for businesses. Identity-based attacks, phishing, malware delivery, and social engineering attacks disguised as legitimate emails continue to challenge organizations globally. In this context, independent third-party testing becomes vital in helping companies choose the right solutions to protect their infrastructure. A recent evaluation by SE Labs, a leading independent security testing firm, put Cisco Secure Email Threat Defense (ETD) under the microscope. The results? ETD achieved SE Labs coveted AAA rating, the highest possible, demonstrating outstanding performance in detecting email-based threats while maintaining a sharp distinction between malicious and legitimate…

Sophos fixed two critical Sophos Firewall vulnerabilities Pierluigi Paganini July 23, 2025 Sophos addressed five Sophos Firewall vulnerabilities that could allow remote attackers to execute arbitrary code. Sophos has fixed five vulnerabilities (CVE-2025-6704, CVE-2025-7624, CVE-2025-7382, CVE-2024-13974, CVE-2024-13973) in Sophos Firewall that could allow an attacker to remotely execute arbitrary code. “Sophos has resolved five independent security vulnerabilities in Sophos Firewall. Every Critical and High severity vulnerability was remediated through hotfixes.” reads the advisory. “No action is required for Sophos Firewall customers to receive these fixes with the “Allow automatic installation of hotfixes” feature enabled on remediated versions (see Remediation section below). Enabled…

Hundreds of organizations around the world suffered data breaches this week, as an array of hackers rushed to exploit a recently discovered vulnerability in older versions of the Microsoft file-sharing tool known as SharePoint. The string of breaches adds to an already urgent and complex dynamic: Institutions that are longtime SharePoint users can face increased risk by continuing to use the service, just as Microsoft is winding down support for a platform in favor of newer cloud offerings.Microsoft said on Tuesday that, in addition to other actors, it has seen multiple China-linked hacking groups exploiting the flaw, which is specifically…

In this post, I talk through the motivation, complexities and implementation details of building torchvista, an open-source package to interactively visualize the forward pass of any Pytorch model from within web-based notebooks. To get a sense of the workings of torchvista while reading this post, you can check out: Github page if you want to install it via pip and use it from web-based notebooks (Jupyter, Colab, Kaggle, VSCode, etc) An interactive demo page with various well-known models visualized A Google Colab tutorial A video demo: Motivation Pytorch models can get very large and complex, and making sense of one…

A new ransomware variant dubbed “Crux” was detected by Huntress researchers in three attacks this month, with the group favoring RDP for initial access and legitimate processes to make it more difficult to detect it. The group also claims to be part of the BlackByte RaaS crew, though Huntress couldn’t validate the claim. The post New Crux Ransomware Emerges in Three Attacks This Month appeared first on Security Boulevard.

Brave Software says its privacy-focused browser will block Microsoft’s Windows Recall from capturing screenshots of Brave windows by default to protect users’ privacy. Windows Recall is an opt-in Windows feature that takes screenshots of active windows every few seconds, analyzes them, and enables Windows 11 users to search for text within the snapshots using natural language. The goal is to make it easy for users to quickly find information about past activities in Windows. However, the feature has sparked widespread criticism for potentially exposing sensitive data of Windows users, including passwords, emails, health records, and financial information. Microsoft later increased security by…

In brief PayPal will launch a platform this fall linking domestic wallets like UPI and WeChat Pay to its global merchant network. The service mirrors stablecoin functionality but runs on traditional fiat rails, without blockchain infrastructure. It comes as PayPal continues to support and integrate its stablecoin, PYUSD, into its broader product suite. U.S. payments company PayPal said Wednesday it plans to launch a new platform this fall that will link domestic digital wallets to its global network of billions of users.Dubbed PayPal World, the system lets users of India’s UPI, China’s WeChat Pay, and Brazil’s Mercado Pago transact with…

The U.K. government announced on Tuesday plans to lead a crackdown on cybercriminals by introducing new ransomware measures. These efforts aim to address the growing threat of ransomware and will be developed in collaboration with industry partners following a public consultation. The goal is to better protect businesses and critical services across the country. The consultation focused on three key proposals, including a targeted ban on ransomware payments for owners and operators of regulated critical national infrastructure and the public sector, a ransomware payment prevention regime, and a mandatory incident reporting regime. If adopted, this package would mark the first…

The suspected administrator of xss.is, one of the world’s most influential Russian-speaking cybercrime forums, was arrested in Kyiv, Ukraine, on 22 July. The takedown followed a long-running investigation led by the French Police and Paris Prosecutor, in close cooperation with Ukrainian authorities and Europol. With over 50,000 registered users, xss.is functioned as a major marketplace for stolen data, hacking tools and illicit services. It played a central role in facilitating, advertising, and recruiting for some of the most active and dangerous cybercriminal networks. The arrest was part of a series of coordinated enforcement actions aimed at collecting evidence and dismantling…