Author: HackWatchit

Stellar Cyber released version 6.0.0 of its award-winning open and unified SecOps Platform, introducing new AI-driven capabilities and workflow enhancements designed to propel organizations further along their journey to a human-augmented autonomous SOC. The 6.0.0 release builds on Stellar Cyber’s vision of delivering intelligent, efficient, and decisive security operations through automation, AI, and seamless integration—all while remaining open, flexible, and accessible for security teams of any size or skill level. “With 6.0.0, we’re putting powerful tools into the hands of every analyst—regardless of their experience,” said Aimei Wei, CTO of Stellar Cyber. “From natural language investigation to automatic phishing triage,…

From QR codes and tokenized wallets to instant settlement networks and blockchain rails, the technological underpinnings of payments are evolving faster than most adjacent sectors. Yet, for all the feats of engineering, true success in this domain is dictated not by what is possible but by what is adopted. The most lasting innovations in payments can frequently center on a deceptively simple question: Will people actually use this? “Innovation alone doesn’t create impact. Adoption does,” Dani Lugo, the U.S. payments strategy lead at Bank of America, told PYMNTS. “And adoption is achieved when behaviors [change, not just when the features…

Executive Summary Since late 2024, Unit 42 researchers have been tracking a cluster of suspicious activity as CL-STA-1020, targeting governmental entities in Southeast Asia. The threat actors behind this cluster of activity have been collecting sensitive information from government agencies, including information about recent tariffs and trade disputes. This campaign is particularly noteworthy due to its novel tradecraft. The threat actors have developed a previously undocumented Windows backdoor, which we named HazyBeacon. This backdoor leverages AWS Lambda URLs as command and control (C2) infrastructure. AWS Lambda URLs are a feature of AWS Lambda that allows users to invoke serverless functions…

Modern AI attacks require runtime guardrails capable of spanning application, container and node/host runtime environments comprehensively. The post Security in the Era of AI-speed Exploits appeared first on Security Boulevard.

In brief Regulators in South Korea have approved a third-party share deal giving Metaplanet CEO Simon Gerovich and Sora-led investors control of SGA Co. The group includes KCGI, a major South Korean investment firm, and aims to influence treasury strategies across the region. The move mirrors Metaplanet’s Japan strategy and signals a coordinated Bitcoin push across South Korea and Asia. Metaplanet CEO Simon Gerovich is helping to advance a Bitcoin treasury strategy campaign in Asia through a newly approved acquisition of a South Korean public firm, following a similar move in Thailand earlier this month.South Korea’s SGA Co., a systems integrator…

pqcscan is an open-source tool that lets users scan SSH and TLS servers to see which Post-Quantum Cryptography (PQC) algorithms they claim to support. It saves the results in JSON files. You can turn one or more of these files into an HTML report that opens in a web browser. The road to PQC “I created pqcscan because we see all the big ones rolling out PQC algorithms in production,” Vincent Berg, CTO at Anvil Secure and the creator of the tool, told Help Net Security. Governments are also raising the stakes. “The EU, US, and UK are all creating…

WatchTowr Labs reveals CVE-2025-25257, a critical FortiWeb SQL injection allowing unauthenticated remote code execution. Patch your FortiWeb 7.0, 7.2, 7.4, 7.6 devices immediately to prevent full system compromise. Update NOW! Cybersecurity researchers have uncovered a major weakness, CVE-2025-25257, in a key part of Fortinet’s security software: the FortiWeb Fabric Connector, vital for linking Fortinet’s web application firewall (FortiWeb) with other security tools, enabling dynamic protections. The vulnerability was initially reported to Fortinet by Kentaro Kawane from GMO Cybersecurity by Ierae. The subsequent demonstration of escalating the vulnerability to full system control was performed and published by watchTowr Labs, and the…

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Datacarry Ransomware DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal Batavia spyware steals data from Russian organizations Taking SHELLTER: a commercial evasion framework abused in- the- wild Open Source Malware Index Q2 2025: Data exfiltration remains a leading threat Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates  From Click to Compromise: Unveiling the Sophisticated Attack of DoNot APT Group on Southern European Government Entities  Crypto Wallets Continue to be Drained in Elaborate Social Media…

In this Help Net Security interview, Gail Hodges, Executive Director at the OpenID Foundation, discusses how the Foundation ensures global consistency in FAPI 2.0 implementations and helps different industries, including healthcare, adopt secure and interoperable identity standards. Hodges also explains how conformance testing and strategic partnerships help maintain security and interoperability across sectors. What role does the OpenID Foundation play in ensuring global consistency in FAPI 2.0 implementations, especially in sectors like healthcare that haven’t historically used open identity standards at this scale? 1. Standards As a non-profit technical standards body, the OpenID Foundation’s primary role is to lead the…