Author: HackWatchit

The cybersecurity battlefield evolves daily, with SOC analysts serving as front-line defenders. After years of training SOC teams, I’ve identified 11 core skills that separate effective defenders from the rest.Here’s the problem: we’re training analysts to look for needles in haystacks when they don’t even know what hay looks like. Too many enter SOC positions without understanding the systems they’re trying to protect.1. Understanding Operating SystemsYou can’t defend what you don’t understand. Period. Master both Windows and Linux. Not just surface stuff, but really get how they work under the hood. Learn through the incident response lens:”If this system were…

Cybersecurity company Bitdefender announced that GravityZone Exposure Management, an advanced solution, gives organizations a comprehensive view of threat risk exposure across their internal and external attack surfaces, reveals the most impactful weaknesses, and remediates them. It consolidates findings across the entire environment into a single view, reducing complexity for lean security teams as AI significantly speeds attack cycles. For many organizations, the challenge is not simply finding vulnerabilities but knowing which ones matter and having the resources to address them without disrupting everyday business operations. In a global survey of 1,200 cybersecurity practitioners, the top barriers to reducing the attack…

Expect to see quite a few websites serving error pages today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild. Image: Shutterstock.com, Sashkin. The flaws at issue are present in PHP, the programming language that powers sites running on a large number of web publishing systems, including Drupal, Magento, Joomla and WordPress. Earlier today, PHP released an emergency security update…

Prediction market platform Polymarket briefly halted trading on its international exchange on Thursday, October 29, after users reported unauthorized withdrawals from their wallets. Blockchain analytics firms Betting Intelligence and Polysights estimated that attackers took about $2.7 million from 710 wallets. The incident involved a compromised third-party performance-monitoring script supplied by DebugBear, a UK-based website performance vendor whose code ran on Polymarket.com. How the DebugBear Script Was Abused In its post-incident update, Polymarket said the attacker replaced DebugBear’s monitoring script with malicious code designed to target its users. For users who had Polymarket open during a short window, the script used…

Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539 Pierluigi Paganini October 31, 2026 Drupal warns that attackers are exploiting a critical authorization flaw in Commerce Core, putting vulnerable online stores at risk. Drupal warns that threat actors are exploiting a highly critical security flaw, tracked as CVE-2026-118539, in its Commerce Core module. The vulnerability is caused by missing authorization checks. “This module enables you to sell goods and services to customers through an included shopping cart and checkout form or through decoupled applications via APIs. The module doesn’t sufficiently protect certain routes and entity fields, leading to an access bypass…

The Turing Test measures machine intelligence by assessing whether an AI can engage in conversations indistinguishable from those of a human. Conceptualized by Alan Turing in 1950, the Turing Test originally qualified a computer’s capacity for human-like intelligence by its ability to imitate human-like responses and reasoning in natural language dialogue. Yet as large language models demonstrate increasingly sophisticated conversational abilities, experts like Hassan Taher question whether this decades-old framework adequately measures what matters most in AI development. Hassan Taher, founder of Taher AI Solutions and author of several influential works on artificial intelligence ethics, has been examining how evolving…

SentinelOne has announced its intent to acquire Observo AI. The deal will serve as an immediate complement and catalyst to SentinelOne’s AI SIEM and data offerings, which are already amongst the company’s fastest growing solutions, delivering a record contribution to quarterly bookings in Q2 FY26. It will also help SentinelOne usher in a new era of open, intelligent, and autonomous security operations, reimagining how SOC teams collect, enrich, and act on data across their entire security ecosystem. The announcement comes as security operations teams struggle with costs, complexity and delays created by ever increasing security data volumes – forcing compromises…

Quantum computing is coming. When? No one knows for sure. Some experts say 10 years, others say 15 to 20 years. Many believe quantum computers will be here even sooner. According to a recent survey of more than 900 quantum professionals by QuEra, over 50% of respondents indicated that the pace of quantum computing development is faster (41.2%) or much faster (10.2%) than they expected. The survey also revealed that 40% of respondents say quantum computing will become a superior alternative to classical computing for certain workloads within the next 5 years. One thing all experts agree upon is that quantum computing…

Sextortion-based hacking, which hijacks a victim’s webcam or blackmails them with nudes they’re tricked or coerced into sharing, has long represented one of the most disturbing forms of cybercrime. Now one specimen of widely available spyware has turned that relatively manual crime into an automated feature, detecting when the user is browsing pornography on their PC, screenshotting it, and taking a candid photo of the victim through their webcam.On Wednesday, researchers at security firm Proofpoint published their analysis of an open-source variant of “infostealer” malware known as Stealerium that the company has seen used in multiple cybercriminal campaigns since May…