Author: HackWatchit

UEFI firmware running on 100+ Gigabyte motherboard models is affected by memory corruption vulnerabilities that may allow attackers to install persistent and difficult-to-detect bootkits (i.e., malware designed to infect the computer’s boot process). “While AMI (the original firmware supplier) has indicated that these vulnerabilities were previously addressed, they have resurfaced in Gigabyte [OEM firmware builds] and are now being publicly disclosed,” Carnegie Mellon University’s CERT Coordination Center (CERT/CC) has warned on Friday. The Gigabyte UEFI vulnerabilities The four vulnerabilities, reported by the Binarly REsearch team, affect the System Management Mode (SMM) module in Gigabyte motherboards, which is used for handling…

As the concept of a traditional network perimeter becomes obsolete, identity is now the key to maintaining control. Attackers are increasingly targeting user credentials and sessions to gain unauthorized access, bypassing traditional defenses. Protecting user identities and access is paramount for securing modern enterprises, especially those relying on cloud services like Microsoft 365. That’s why we’re thrilled to announce that Universal Zero Trust Network Access (ZTNA) from Cisco has undergone rigorous independent testing by SE Labs, a leading authority in security testing, and has achieved its highest possible rating: AAA. This marks a significant milestone as the industry’s first SE…

OpenAI is following Perplexity and is working on its own AI-powered browser codenamed “Aura.” X user Tibor found references to “Aura,” which is probably the codename for the new OpenAI browser. There are already mentions of “is Aura” (“mini-root,” which is similar to checks for Android, iOS, or Electron/ChatGPT Windows desktop app), “is Aura Sidebar,” and “in Aura” in the ChatGPT web app. Reuters previously reported that OpenAI is building a Chromium-based Chrome alternative that will use generative and agentic AI capabilities to transform the web browsing experience. OpenAI also expressed interest in acquiring Chrome if the US vs Google antitrust…

A new report from AppOmni captures a significant misplaced confidence in the security of software-as-a-service applications and escalating risks associated with these cloud services. The post The SaaS Security Disconnect: Why Most Organizations Are Still Vulnerable  appeared first on Security Boulevard.

In brief PENGU, the Pudgy Penguins-themed meme coin, jumped nearly 95% this week after Coinbase changed its X profile to a Penguin NFT and ETF filings gained attention. Investment firm Canary Capital filed for a PENGU ETF in March; the SEC is now reviewing it along with over two dozen other altcoin ETF proposals. Analysts remain skeptical, warning that PENGU lacks real utility or fundamentals and may struggle to hold gains once the ETF hype fades. The Pudgy Penguins-themed meme coin, PENGU, has surged over 100% in the past week, fueled by ETF chatter and a push on social media—but…

“Data is the fossil fuel of AI.” – Ilya Sutskever, co-founder and former chief scientist at OpenAI “The best prophet of the future is the past.” – Lord Byron “Show me the incentive and I will show you the outcome.” – Charlie Munger I have decided to write about the history of data for several reasons. First, I work in data, and I like to know the history of my field. Second, I believe the best way to understand what might happen in the future is to understand what’s happened in the past. And third, I believe the trends we…

North Korea-linked actors spread XORIndex malware via 67 malicious npm packages Pierluigi Paganini July 15, 2025 North Korea-linked hackers uploaded 67 malicious npm packages with XORIndex malware, hitting 17K+ downloads in ongoing supply chain attacks. North Korea-linked threat actors behind the Contagious Interview campaign have uploaded 67 malicious npm packages with XORIndex malware loader, hitting over 17,000 downloads in ongoing supply chain attacks. XORIndex was built to evade detection and deploy BeaverTail, a second-stage malware tied to the known backdoor InvisibleFerret. This follows the earlier HexEval loader campaign, still ongoing with over 8,000 downloads. Despite takedown efforts, 27 packages remain…

For decades, manufacturers and security professionals have been playing a high-stakes game of cat and mouse with counterfeiters. From holograms and QR codes to RFID tags and serial numbers, the industry’s toolkit has evolved, but so have the threats. Now, Italian startup Particular Materials is taking a radically different approach: tagging physical goods at the molecular level using engineered nanomaterials. “Our idea was simple,” says Francesco Zanin, CEO of Particular Materials. “What if we could give materials their own unique, embedded identity, one that’s invisible, unremovable, and incredibly hard to fake?” That idea didn’t come from the anti-counterfeiting world. It…

For years, so-called “nudify” apps and websites have mushroomed online, allowing people to create nonconsensual and abusive images of women and girls, including child sexual abuse material. Despite some lawmakers and tech companies taking steps to limit the harmful services, every month, millions of people are still accessing the websites, and the sites’ creators may be making millions of dollars each year, new research suggests.An analysis of 85 nudify and “undress” websites—which allow people to upload photos and use AI to generate “nude” pictures of the subjects with just a few clicks—has found that most of the sites rely on…