Author: HackWatchit

Microsoft is rolling out significant changes to Windows 11 24H2 as part of the Windows Resilience Initiative, designed to reduce downtime and help devices recover from serious failures, as well as an overhaul of the all-too-familiar BSOD crash screens. Microsoft’s Windows Resiliency Initiative is a new effort by Microsoft to make Windows more stable, self-healing, and faster to recover from critical failures. This initiative is in direct response to recent incidents that caused widespread disruptions and crashes due to flawed updates, like the global CrowdStrike driver outage. Microsoft has now announced that it has replaced the Windows Blue Screen of Death…

SharePoint under fire: new ToolShell attacks target enterprises Pierluigi Paganini July 22, 2025 While SentinelOne did not attribute the attack to a specific threat actor, The Washington Post linked it to China-nexus acors. On July 19, Microsoft confirmed active exploitation of a zero-day vulnerability, tracked as CVE-2025-53770 in on-prem SharePoint Servers. The IT giant issued emergency patches for SharePoint Subscription Edition and 2019, with 2016 updates pending. Microsoft urges customers to immediately patch the vulnerability. SentinelOne observed attacks on July 17 and identified three attack clusters with different tactics, while the attribution remains ongoing. CVE-2025-53770 (ToolShell) exploit was initially used…

As Microsoft continues to update its customer guidance for protecting on-prem SharePoint servers against the latest in-the-wild attacks, more security firms have begun sharing details about the ones they have detected. Most intriguingly, Check Point Research says that they observed the first exploitation attempts on July 7th, with the target being a major Western government. That date not only precedes the publication of the screenshot of the ToolShell exploit chain (CVE-2025-49706 + CVE-2025-49704) in action and that of additional technical details, but also the date of the release of the patches for those flaws. Updated guidance While Microsoft initially stated…

Austin, United States / TX, July 21st, 2025, CyberNewsWire Living Security, the global leader in Human Risk Management (HRM), today released the 2025 State of Human Cyber Risk Report, an independent study conducted by leading research firm Cyentia Institute. The report provides an unprecedented look at behavioral risk inside organizations and reveals how strategic HRM programs can reduce that risk 60% faster than traditional methods. Drawing on behavioral data from more than 100 enterprises and hundreds of millions of user events, the study offers a first-of-its-kind, data-driven map of where cyber risk actually lives in the workforce and how leading organizations are shrinking it.…

Cryptocurrency offers exciting opportunities—but it’s also a favorite playground for scammers.   With the rapid rise of deepfake technology and deceptive AI-driven schemes, even seasoned investors can fall victim to fraud. According to McAfee’s State of the Scamiverse report, deepfake scams are on the rise, with the average American now encountering 2.6 deepfake videos daily. And younger adults (18-24) see even more – about 3.5 per day.  From fake investment opportunities to phishing attempts, bad actors are more sophisticated than ever.   The recent wave of Trump-themed meme coins—more than 700 copycats attempting to mimic the real thing—highlights just how rampant crypto…

Why Falcon Exposure Management Stands Out In its first-ever evaluation of the Unified Vulnerability Management (UVM) category, Forrester assessed 10 vendors. CrowdStrike received the highest possible score (5.0) in three criteria that we believe define modern exposure management: Innovation: Our roadmap features modern capabilities including AI risk analysis, authenticated scanning, customized reporting, and conversational risk queries through CrowdStrike Charlotte AI™.  Exposure Assessment and Prioritization: We think CrowdStrike’s integrated visibility across endpoint, cloud, identity, and workload environments stood out as a foundational strength. We deliver unified visibility across on-premises, cloud, identity, and workload environments, and prioritize alerts with adversary-driven logic. “CrowdStrike…

New information has emerged regarding ongoing cyberattacks against Microsoft’s on-premises SharePoint servers, revealing a wider impact than initially understood. Yesterday, Hackread.com reported on Microsoft’s urgent warnings and new security updates for critical vulnerabilities (CVE-2025-53770 and CVE-2025-53771) that allow attackers to execute malicious code. Now, cybersecurity researchers have confirmed a significant escalation: approximately 100 organisations worldwide have been successfully breached so far. This widespread exploitation has impacted governments, businesses, and other entities globally. Victims include national governments in Europe and the Middle East, along with US government systems such as the Department of Education, Florida’s Department of Revenue, and the Rhode…

U.S. lawmakers have reached out to the heads of Google, Meta, Microsoft, and Amazon, probing whether the subsea cable systems that each company maintains direct or indirect operational involvement with contain components produced, maintained, or repaired by entities affiliated with the People’s Republic of China (PRC), such as S.B. Submarine Systems, Huawei Marine, China Telecom, or China Unicom, or the Russian Federation. They identify that subsea cable systems are responsible for 99 percent of the telecommunications activity across oceans.  In recognition of these threats, the Federal Communications Commission (FCC) announced this month that it will vote on a rule to…

As Microsoft puts the final patch in place, a growing number of hackers, including several China state-sponsored threat groups, are quickly pushing forward to exploit the security flaws that will allow them compromise on-premises SharePoint servers to steal data and maintain persistence. The post Microsoft Patches SharePoint Flaws as Hackers Rush to Exploit Them appeared first on Security Boulevard.