Author: HackWatchit

Legit Security announced enhanced capabilities for significant code change and workflow orchestration within its platform. These capabilities provide insight into changes in code, configuration, or infrastructure that can impact an application’s security or compliance posture. With visibility into where everyday code changes are occurring and the appropriate workflows to resolve them, AppSec and development teams can overcome the challenges of disconnected tool sprawl, duplicate alerts, remediation without context, and hidden or unnoticed code. Detecting, documenting, and addressing code changes is a security requirement due to high-impact, high-volume changes taking place within code, pipelines, dependencies, and policies. However, this requirement is…

Senate intel bill takes on Salt Typhoon, ODNI reorganization The Senate intel bill also touches on the intelligence community’s AI use, the procurement of innovative technologies, and enhanced whistleblower protections. Justin Doubleday@jdoubledayWFED July 18, 2025 3:47 pm 3 min read Senate lawmakers that oversee the intelligence community are advancing a bill that seeks to thwart China-connected hackers, reorganize the IC’s lead office and more. The Senate Select Committee on Intelligence passed its version of the fiscal 2026 intelligence authorization bill on Tuesday by a vote of 15-2. The committee typically takes a few weeks to post the full text of…

A PoisonSeed phishing campaign is bypassing FIDO2 security key protections by abusing the cross-device sign-in feature in WebAuthn to trick users into approving login authentication requests from fake company portals. The PoisonSeed threat actors are known to employ large-volume phishing attacks for financial fraud. In the past, distributing emails containing crypto seed phrases used to drain cryptocurrency wallets. In the recent phishing attack observed by Expel, the PoisonSeed threat actors do not exploit a flaw in FIDO2’s security but rather abuse the legitimate cross-device authentication feature. Cross-device authentication is a WebAuthn feature that allows users to sign in on one device using a security key or…

Fortinet FortiWeb flaw CVE-2025-25257 exploited hours after PoC release Pierluigi Paganini July 19, 2025 Hackers exploited a Fortinet FortiWeb flaw the same day a PoC was published, compromising dozens of systems. Hackers began exploiting a critical Fortinet FortiWeb flaw, tracked as CVE-2025-25257 (CVSS score of 9.6), on the same day a proof-of-concept (PoC) exploit was published, leading to dozens of compromised systems. Exploitation of Fortinet’s CVE-2025-25257 began on July 11 after the PoC was published. The flaw is a SQL injection vulnerability in FortiWeb (CWE-89) that allows unauthenticated attackers to execute unauthorized SQL commands via crafted HTTP/HTTPS requests. “An improper…

Context centers, network slowdowns can appear out of nowhere. A sudden burst of traffic from distributed systems, microservices, or AI training jobs can overwhelm switch buffers in seconds. The problem is not just knowing when something goes wrong. It is being able to see it coming before it happens.Telemetry systems are widely used to monitor network health, but most operate in a reactive mode. They flag congestion only after performance has degraded. Once a link is saturated or a queue is full, you are already past the point of early diagnosis, and tracing the original cause becomes significantly harder. In-band…

Cyware and Carahsoft Technology have announced a strategic partnership that enables faster adoption of AI-driven cyber defense solutions through Carahsoft’s government procurement channels. Under the agreement, Carahsoft will serve as Cyware’s Public Sector distributor, making Cyware’s solutions available to State, Local, Tribal and Territorial (SLTT) agencies through Carahsoft’s reseller partners and National Association of State Procurement Officials (NASPO) ValuePoint, The Interlocal Purchasing System (TIPS), OMNIA Partners, E&I Cooperative Services Contract, and The Quilt contracts. As cyberattacks on public infrastructure increase in scale and complexity, organizations face mounting pressure to improve threat visibility, coordination, and response — often with limited resources…

Zimperium, a provider of mobile security software, this week published a report that notes more than 5 million unsecured public Wi-Fi networks have been detected globally since the beginning of 2025 The post Summer Vacation Alert Surfaces More Than 5 Million Unsecured Wi-Fi Networks appeared first on Security Boulevard.

In brief A 74-year-old man disappeared in May after leaving home without his phone. Authorities believe the disappearance is linked to the man’s family’s crypto fortune. They’ve found evidence of fraudulent activity and impersonation of him to communicate with family members. The man’s son, a hedge fund executive, believes someone stole his father’s identity and drained over $1 million from his accounts. Naiping Hou, 74, left home on a Monday without his phone and never came back. Local law enforcement believes the disappearance is linked to his family’s crypto holdings.Days later, his silver Toyota Yaris was found abandoned near a…

Episource, a company specialising in medical billing, is currently informing more than 5.4 million individuals across the United States that their personal and health information was stolen in a cyberattack earlier this year. This incident, impacting a significant number of Americans, stands as a major healthcare data breach reported in 2025 so far, according to data from the US Department of Health and Human Services. What Happened Episource, which is part of Optum, a subsidiary of UnitedHealth Group, plays a crucial role in the healthcare system. As a medical billing company, it works with doctors, hospitals, and other healthcare providers…