Author: HackWatchit
As organizations continue to deploy AI, security professionals find themselves confronting critical gaps in their level of preparedness, according to F5’s 2025 State of AI Application Strategy Report. The post Survey Finds AI Adoption Outpacing Security Readiness appeared first on Security Boulevard.
Strategy (formerly MicroStrategy) said it purchased 4,225 Bitcoin for approximately $472.5 million between July 7 and 13, according to a July 14 statement with the US Securities and Exchange Commission (SEC).The acquisition, made at an average price of $111,827 per Bitcoin, brings the company’s total holdings to 601,550 BTC. These assets were acquired for $42.87 billion, at an average cost of $71,268 per coin.As of press time, Strategy’s Bitcoin treasury is worth $72.74 billion, representing a nearly 70% gain based on current market prices.Strategy sold various classes of stock to fund the purchase, including 797,008 shares of its MSTR common…
Cyber threats are advancing rapidly, with over 75% of attacks starting via email. Traditional defenses alone are no longer sufficient, which is why SmartAwareness by Check Point, part of Infinity Global Services (IGS), offers a modern, AI-powered approach to security awareness – now available as a fully managed service. Why SmartAwareness? SmartAwareness is more than just training – it’s a comprehensive, AI-powered platform designed to build a security-first culture across your organization. SmartAwareness equips employees with the skills to recognize and respond to threats through tailored, real-time training. It supports compliance across industries and adapts to your organization’s size, risk…
With two proof-of-concept (PoC) exploits made public late last week, CVE-2025-25257 – a critical SQL command injection vulnerability in Fortinet’s FortiWeb web application firewall – is expected to be leveraged by attackers soon. About CVE-2025-25257 CVE-2025-25257 is found in FortiWeb’s Fabric Connector, the software that allows FortiWeb to communicate with other Fortinet security products (e.g., FortiGate firewalls, FortiSandbox, etc.). The flaw stems from the solution’s failure to properly neutralize special elements and, if triggered, it may allow unauthented attackers to achieve remote code execution with root privileges, by executing unauthorized SQL code/commands via crafted HTTP or HTTPs requests. Fortinet has…
Bangalore, India, July 14th, 2025, CyberNewsWire Zero Trust CNAPP, Code to Cognition security platform, that delivers comprehensive multi-cloud security to protect Virtual Machine and Kubernetes assets. AccuKnox, Inc., announced that Tible has partnered with AccuKnox to deploy Zero Trust CNAPP (Cloud Native Application Protection Platform) integrated with SIEM (Security Incident and Event Management). Gartner Group, in its latest findings, reported that security leaders should: Adopt CNAPP offerings to safeguard cloud-native applications and counter the growing attack surface. These solutions protect against threats in the runtime environment, mitigate misconfigurations in cloud infrastructure, and streamline security integration and collaboration throughout the overall…
Denmark is taking a ground-breaking step in the fight against deepfake technology, proposing an amendment to its copyright laws that would allow individuals to own their own likeness. This innovative approach, backed by a broad consensus in the Danish Parliament, aims to empower citizens to demand the removal of unauthorised digital reproductions of their appearance and voice from online platforms. The Growing Threat of Deepfakes Deepfakes are incredibly realistic digital fabrications of a person’s image, voice, or actions and are becoming more sophisticated and harder to distinguish from reality, posing significant risks, including harassment, coercion, and even falsely implicating individuals…
A security researcher from Koi Security stumbled upon a critical zero-day buried deep in the infrastructure powering today’s AI coding tools. Had it been exploited, a non-sophisticated attacker could’ve hijacked over 10 million machines with a single stroke. AI coding assistants like Cursor and Windsurf have exploded in popularity, promising supercharged productivity for developers around the world. Behind their sleek interfaces lies a shared foundation: community-built VS Code forks and an open marketplace of extensions that powers the magic. But, with this new wave of developer tooling comes a dangerous blind spot. Dubbed VSXPloit: A single overlooked flaw in OpenVSX…
New data from Cyble reveals that hacktivists are escalating their campaigns against critical infrastructure, moving beyond basic DDoS (distributed denial of service) and defacement tactics to more advanced intrusions and data breaches. In the second quarter of this year, ICS (industrial control system) attacks, data leaks, and access-based intrusions made up 31 percent of hacktivist activity, marking a rise of 29 percent in the first quarter. Notably, Russia-linked groups lead hacktivist ICS attacks. “Since the emergence of Russia-linked Z-Pentest last year, ICS attacks have become increasingly part of hacktivists’ arsenal. This shift from surface-level disruption to infrastructure-level interference suggests growing…
Global Louis Vuitton data breach impacts UK, South Korea, and Turkey Pierluigi Paganini July 14, 2025 Louis Vuitton data breach affects customers in the UK, South Korea, Turkey, and possibly more countries, with notifications underway. Customers of French luxury retailer Louis Vuitton are being notified of a data breach affecting multiple countries, including the UK, South Korea, and Turkey. The security breach was discovered on July 2nd, 2025, and exposed customer personal information, including names and contact details, but the company confirmed that passwords, payment card data, and other financial information were not compromised. The incident may have impacted customers…