Author: HackWatchit

A Russian professional basketball player has been arrested for allegedly acting as a negotiator for a ransomware gang.26-year old Daniil Kasatkin, was reportedly arrested last month at Charles de Gaulle Airport near Paris after flying in with his fiancée.6′ 7″ tall Kasatkin, who until recently was playing for Moscow basketball team MBA, was arrested at the request of US prosecutors who believe that he negotiated ransom payments as part of a criminal operation that has attacked some 900 organisations, including two federal institutions.News of Daniil Kasatkin’s arrest last month was not publicly known until reported in the French media this…

A new report from the U.S. GAO detailed that policies and actions implemented under the Cybersecurity Information Sharing Act of 2015 have positively contributed to the sharing of cyber threat information between federal and nonfederal entities. Sharing such information can enhance awareness of the extent of current cyber threats and how to mitigate those threats. The agency highlighted the actions of seven agencies designated to implement the act, including the Departments of Homeland Security, Justice, Defense, Commerce, Energy, and the Treasury; and the Office of the Director of National Intelligence.  The watchdog observed that malicious cyberattacks on the federal government…

NVIDIA is warning users to activate System Level Error-Correcting Code  mitigation to protect against Rowhammer attacks on graphical processors with GDDR6 memory. The company is reinforcing the recommendation as new research demonstrates a Rowhammer attack against an NVIDIA A6000 GPU (graphical processing unit). Rowhammer is a hardware fault that can be triggered through software processes and stems from memory cells being too close to each other. The attack was demonstrated on DRAM cells but it can affect GPU memory, too. It works by accessing a memory row with enough read-write operations, which causes the value of adjacent data bits to flip from one…

A major international operation has led to the arrest of 14 individuals suspected of involvement in a large-scale phishing attack that defrauded UK taxpayers of an estimated £47 million. The arrests, primarily in Romania, were the result of a joint effort between criminal investigators from HMRC (Her Majesty’s Revenue and Customs), the UK’s tax authority, and over 100 Romanian police officers. Operation Details The coordinated raids across Romania led to the detention of 13 people, both men and women, aged between 23 and 53. Separately, a 38-year-old man was arrested in Preston, UK, in connection with the same cybercrime network.…

How are developers working in 2025? Docker surveyed over 4,500 people to find out, and the answers are a mix of progress and ongoing pain points. AI is gaining ground but still unevenly used. Security is now baked into everyday workflows. Most devs have left local setups behind in favor of cloud environments. And while tools are improving, coordination, planning, and time estimation still slow teams down. AI adoption varies widely Overall, only 22% of respondents use AI tools in their workflows. In IT and SaaS, that number rises to 76%. Some industries report as little as 1% adoption, while…

Threat actors are actively exploiting a recently fixed remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server, security researchers have warned. Wing FTP Server and CVE-2025-47812 Wing FTP Server is a commercial file transfer server solution used by businesses, MSPs and hosting providers. The software can be installed on 64-bit operating systems: Windows, Windows Server, Linux, and macOS. Administration is done via a web-based interface. Users likewise upload/download files securely via browser. CVE-2025-47812 is caused by Wing FTP Server’s user and admin web interfaces mishandle “\0” (i.e., “null”) bytes, which allows attackers to inject arbitrary Lua code into user session…

We are excited to announce that Palo Alto Networks is a Leader in The Forrester Wave™: Zero Trust Platforms, Q3 2025. We achieved the highest score in the Current Offering category, which we believe underscores our innovation in zero trust, SASE and network security. Zero trust is foundational to modern cybersecurity. Trust is never implicit and must always be continuously verified, regardless of user, device or location. In today’s hybrid and evolving threat landscape, a robust zero trust strategy is essential. Our comprehensive zero trust platform is designed to minimize the attack surface, prevent unauthorized access, and limit the lateral…

Executive Summary In late 2024, we discovered a malware variant related to the SLOW#TEMPEST campaign. In this research article, we explore the obfuscation techniques employed by the malware authors. We deep dive into these malware samples and highlight methods and code that can be used to detect and defeat the obfuscation techniques. Understanding these evolving tactics is essential for security practitioners to develop robust detection rules and strengthen defenses against increasingly sophisticated threats. We focus on the following techniques used by the threat actors for the SLOW#TEMPEST campaign: Control flow graph (CFG) obfuscation using dynamic jumps Obfuscated function calls Palo…

The State Department sent an alert to embassies and consulates warning of AI-generated impersonations of high-ranking federal officials after someone posing at Secretary of State Marco Rubio tried to contact foreign ministers and U.S. Congress members. It’s the latest incident in what the FBI calls an “ongoing malicious campaign.” The post Rubio Impersonation Incident is Latest High-Profile Deepfake Scam appeared first on Security Boulevard.