Author: HackWatchit

Executive Summary Unit 42 researchers have been monitoring a series of attacks targeting financial organizations across Africa. We assess that the threat actor may be gaining initial access to these financial institutions and then selling it to others on the dark web. Since at least July 2023, a cluster of activity we track as CL-CRI-1014 has targeted this sector. The attackers employ a consistent playbook, using a combination of open-source and publicly available tools to establish their attack framework. They also create tunnels for network communication and perform remote administration. These tools include: PoshC2: An open-source attack framework Chisel: An…

excellent language for rapid prototyping and code development, but one thing I often hear people say about using it is that it’s slow to execute. This is a particular pain point for data scientists and ML engineers, as they often perform computationally intensive operations, such as matrix multiplication, gradient descent calculations or image processing. Over time, Python has evolved internally to address some of these issues by introducing new features to the language, such as multi-threading or rewriting existing functionality for improved performance. However, Python’s use of the Global Interpreter Lock (GIL) often hamstrung efforts like this.  Many external libraries…

A survey of 1,000 executives of organizations that generate less than $100 million in revenue finds 59% believe the right amount of budget is being allocated to cybersecurity, with 64% noting they also believe their organization is too small to be an attractive target. The post Survey Surfaces Myriad Small Business Security Challenges appeared first on Security Boulevard.

Solana’s tokenized stock market hit $48.53 million on July 4, up more than threefold from $15.28 million on June 20, according to on-chain data tracked by rwa.xyz.Solana’s tokenized stocks capitalization expanded more than threefold in two weeks, outpacing every other tracked network during the period. Furthermore, the tokenized stock market on Solana represented 11.4% of the total market capitalization. Algorand remains the leader in the segment, with $294.71 million, while XRP Ledger follows in second place with $55.35 million. Tokenized shares trade as on-chain representations of traditional equities and settle under the SPL standard on Solana. Prices are tracked through off-chain market-making and…

A Chinese national was arrested in Milan, Italy, last week for allegedly being linked to the state-sponsored Silk Typhoon hacking group, which responsible for cyberattacks against American organizations and government agencies. According to Italian media ANSA, the 33-year-old man, Xu Zewei, was arrested at Milan’s Malpensa Airport on July 3rd after arriving on a flight from China. Italian police arrested the suspect on an international warrant from the U.S. government. ANSA reports that Xu is accused of being linked to the Chinese state-sponsored Silk Typhoon hacking group, aka Hafnium, which has been responsible for a wide range of cyberespionage attacks against…

DoD issues first RFI to overhaul risk management framework The request for information asks vendors seven questions on how DoD’s RMF process can be changed to “reimagine” its overall approach to cyber risk management. Jared Serbu@jserbuWFED June 25, 2025 6:25 pm 4 min read The Defense Department has issued its first call to industry in a promised effort to “blow up” its implementation of the Risk Management Framework, the scheme the department uses to assess and certify the cybersecurity of its IT systems. In a brief request for information published Tuesday, the department asked vendors for input on specific questions.…

Executive Summary The recent conflict involving Iran, particularly its military engagements with Israel and the U.S., significantly heightens the risk of cyber spillover. This extends traditional battlegrounds into the digital realm. While we have not yet seen a dramatic uptick in Iranian-directed cyberattacks, further escalations could manifest as a surge in cyber operations by both state-sponsored groups and independent hacktivists. Their aim would be to disrupt, collect intelligence on or influence perceived adversaries. Iranian threat groups have a history of targeting critical infrastructure and sensitive industries across public and private enterprises globally and these attacks can have far-reaching consequences. Over…

Most organizations are exposing sensitive data through APIs without security controls in place, and they may not even realize it, according to Raidiam. Their report, API Security at a Turning Point, draws on a detailed assessment of 68 organizations across industries. It deliberately excludes regulated environments like UK Open Banking, where advanced security is mandated. The goal was to understand how typical businesses, those without regulatory pressure, are protecting their APIs. The results aren’t encouraging. Over 80% of organizations fell into what the report classifies as the “Act Urgently” category. These are companies that handle high-value personal or payment data…

Telecom giant AT&T has agreed to a $177 million settlement to resolve two major lawsuits stemming from widespread data breaches that impacted millions of its current and former customers in 2019 and 2024. A US District Judge, Ada Brown, granted preliminary approval for the settlement terms on Friday, June 20 . While the company denies responsibility for these “criminal acts,” it opted for the settlement to avoid lengthy legal battles. AT&T confirmed these two data security incidents last year. The first breach, which began in 2019, exposed personal information for about 7.6 million current and 65.4 million former account holders.…