Author: HackWatchit

JAMES BALL For example, for Secure DNS, every three months they do a little ceremony to renew the keys. And I’ve stood in and watched one of these. JAMES BALL And of course, once a journalist was in a room and I had a camera person with me, it all went wrong. They messed it up. They got locked in a cage.They had to set off the fire alarm to get let out. It turned into total slapstick. Smashing Security, episode 490.How Jared Kushner’s iPhone was allegedly hacked twice, with Graham Cluley and special guest James Ball. Hello, hello, and…

Here’s a counterintuitive truth: the ultimate goal of threat hunting isn’t to find more security incidents—it’s to drive continuous improvement across your entire security program. We’re not hunting merely to find present bad; we’re hunting to decrease the probability of future bad.Think of it like debugging. You don’t debug just to find bugs—you debug to build better software. Each bug you find teaches you something about your system, improves your testing, and makes future bugs less likely. Threat hunting works the same way.The Cyclical Nature of Threat HuntingEvery threat hunting framework can be thought of as a cycle that improves…

A vulnerability in TeamViewer could let attackers run code on an IT support technician’s computer when the technician connected to an attacker-controlled device. Once the remote session was established, the attack required no further clicks or theft of the technician’s password. The now-patched vulnerability affected TeamViewer, a remote-access tool commonly used by corporate help desks to troubleshoot employees’ devices. Cybersecurity firm Remedio discovered the flaw and shared details of the investigation with Hackread.com. According to Remedio researcher Omri Dar, on an unpatched system, the attack works as soon as the technician accepts the incoming connection. How the Integer Overflow Works…

The velocity of vulnerabilities being discovered using Frontier AI and OpenWeight models such as Cisco Anteras is unprecedented and defenders need more time. All vendors are dealing with an influx of vulnerabilities and addressing them as soon as possible. On Oct 13 Microsoft released 1,411 patches of which 70 were critical flaws and 3 were zero days! It included 317 remote code executions flaws, 677 privileged escalation flaws, and 40 security feature flaws. Fair play to Microsoft for addressing these vulnerabilities and Cisco as well as others are not immune to vulnerabilities but over time we all should see less…

Welcome to Kernel Panic, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up here.New research shared exclusively with Kernel Panic shows that hackers have started adding AI functionality into a new strain of infostealer malware, making it possible for the system to automatically profile victims and quickly surface the highest value targets and their information. Dubbed “Volta-Autodoxer” because of how the malware refers to itself internally, the finding by Cisco Talos researchers sheds light on the ways that…

U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 31, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-111357 (CVSS score of 8.8) – A missing authentication check for a critical function that could allow an authenticated local attacker to gain higher privileges. CVE-2026-118527 (CVSS score of 4.3) – A predictable identifier vulnerability that could allow an authenticated remote attacker to upload files…

Topic: Enterprise AI Governance Framework: Implementation, Metrics, and Oversight Recording Coming Soon Abstract: Even well-designed AI governance frameworks often fail at the execution stage. Without integration into daily operations, clear metrics, and continuous oversight, governance efforts remain theoretical and unsustainable. This session focuses on execution. We’ll explore how to embed governance controls directly into AI development and deployment lifecycles, supported by implementation roadmaps, governance tooling, and measurable KPIs. The session also covers continuous monitoring techniques—such as model performance tracking, bias detection, and compliance audits—to ensure ongoing effectiveness. Learn how to transform AI governance from a one-time initiative into a scalable,…

For the eighth consecutive time, Palo Alto Networks is recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management. Once again, it is positioned furthest along in Completeness of Vision and has been positioned so in every Magic Quadrant published for this category. Read the 2026 Gartner® Magic Quadrant™ for Privileged Access Management. Identity is not a siloed risk. As an increasingly attractive target for threat actors, it must be understood and secured across the entire attack surface. For our customers, the benefit is clear: as part of Palo Alto Networks, Idira helps you adopt AI…

Detection engineering is both a role and an activity. It’s the discipline of building and maintaining the logic that identifies malicious or risky behavior within your organization. It’s where security analysis meets software engineering, turning raw logs and telemetry into actionable detections that defenders can rely on.Detection engineers bridge the gaps between security operations, threat intelligence, and infrastructure. They understand how attackers operate, how defenders respond, and how systems generate the data that supports those detections. A well-built detection can mean the difference between an alert that matters and one that drowns in noise.Precision and Recall: The Balancing ActEvery detection…