Author: HackWatchit

In this episode, Graham warns why it is high time we said goodbye to 2G – the outdated mobile network being exploited by cybercriminals with suitcase-sized SMS blasters. From New Zealand to London, scammers are driving around cities like dodgy Uber drivers, spewing phishing texts to thousands at once. Meanwhile, Carole unpacks a painfully awkward tale of amour fou, as a 76-year-old Belgian man drives 476 miles to meet his dream woman… only to be greeted by her very-much-still-husband at the gate. Plus: Sky Arts painting competitions get a thumbs up, Mark Zuckerberg never loses at board games, and the…

Recently, five popular NPM (Node Package Manager) packages were compromised and modified to deliver a malicious DLL, dubbed “Scavenger”. The malware pushed via these compromised NPM packages executes in two stages: an initial first-stage loader, followed by a second-stage infostealer.  NPM is the package manager for the Node.js JavaScript platform, which allows developers to share and manage JavaScript libraries and tools. By compromising these packages, attackers are able to perform supply chain attacks that have widespread impact and can be challenging to identify. Here, we outline this attack and explain how the CrowdStrike Falcon® platform detects and successfully prevents the…

The Federal Bureau of Investigation (FBI), alongside the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Health and Human Services (HHS), and the Multi-State Information Sharing and Analysis Center (MS-ISAC), has issued a warning regarding increased activity by the Interlock ransomware group. This financially motivated threat targets a wide range of organizations, including businesses and vital critical infrastructure across North America and Europe, employing a dangerous double extortion model to maximize pressure on victims. Interlock’s Uncommon Attack Methods Interlock ransomware was first detected in late September 2024, with FBI investigations as recent as June 2025 detailing their evolving tactics.…

Federal agencies are under increasing pressure to do more to meet their mission, with fewer employees and tighter budgets. Randy Hayes, vice president of public sector at VAST Data Federal, said the Department of Government Efficiency is making it a priority for agencies to adopt artificial intelligence tools more quickly. “They were forced to efficiency. They were forced to do more with less,” Hayes said. “They’re going to have less budget, they’re going to have less employees. And so, it’s been a forcing function for all of these folks to look at a new way to do things.” Getting AI-ready…

U.S. CISA urges FCEB agencies to fix two Microsoft SharePoint flaws immediately and added them to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 23, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds two Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Microsoft SharePoint flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2025-49704 Microsoft SharePoint Code Injection Vulnerability CVE-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability This week, Microsoft warned of a SharePoint zero-day vulnerability, tracked as CVE-2025-53770 (CVSS score of 9.8), which is under active…

is everywhere. There are countless books, articles, tutorials, and videos, some of which I have written or created.In my experience, most of these resources tend to present data storytelling in an overwhelmingly positive light. But lately, one concern has been on my mind: What if our stories, instead of clarifying, mislead? Image 1. Change the perspective, and you see an entirely different story. Photos by the author The image above shows one of the apartment buildings in my neighborhood. Now, take a look at the photo on the left and imagine one of the apartments in the white building is…

In parts one and two, we explored the ransomware attack chain, the shortcomings of fragmented defenses, and the advantages of a unified hybrid mesh approach. In part three, Pete Nicoletti joins us to share practical steps CISOs can take right now to start building a hybrid mesh architecture that effectively counters ransomware threats. Finally, we outline Check Point’s vision and strategy for delivering Hybrid Mesh Security. Strategic Actions for CISOs Here are three next steps security leaders can take to prepare their environments for ransomware resilience with hybrid mesh architectures: Audit Your Visibility and Segmentation Posture Identify blind spots between…

Proton has launched a new tool called Lumo, offering a privacy-first AI assistant that does not log user conversations and doesn’t use their prompts for training. Proton is a Swiss company behind proven privacy and security tools and services, including Proton Mail, Proton VPN, and Proton Drive. In June 2024, it transitioned to a non-profit structure, putting user privacy over profits. The introduction of Lumo aligns with this mission, as Proton claims this AI tool is designed to provide help without tracking users, retaining or sharing their data, and hiding risky functions in closed-source code. Instead, Lumo is based on…

Amazzon Beee Buzzzz: It records everything you say (and what people around you say, too). The post Amazon AI Privacy Panic — Bee Brings Bezos Panopticon appeared first on Security Boulevard.