Author: HackWatchit

Researchers from the University of Pretoria presented a new technique for detecting tampering in PDF documents by analyzing the file’s page objects. The technique employs a prototype that can detect changes to a PDF document, such as changes made to the text, images, or metadata. Prototype flow With the PDF format being used as a formal means of communication in multiple industries, it has become a good target for criminals who wish to affect contracts or aid in misinformation. With technology improving and easy access to tools like Adobe Acrobat and many free online editors, it’s now simple to change…

Executive Summary In March 2025, Apache disclosed CVE-2025-24813, a vulnerability impacting Apache Tomcat. This is a widely used platform that allows Apache web servers to run Java-based web applications. The flaw allows remote code execution, affecting Apache Tomcat versions 9.0.0.M1 to 9.0.98, 10.1.0-M1 to 10.1.34 and 11.0.0-M1 to 11.0.2. The same month, Apache revealed two additional vulnerabilities in Apache Camel, a message routing middleware framework. These vulnerabilities are CVE-2025-27636 and CVE-2025-29891, two flaws that allow remote code execution, affecting Apache Camel versions 4.10.0 to 4.10.1, 4.8.0 to 4.8.4 and 3.10.0 to 3.22.3. These vulnerabilities are significant because millions of developers…

Alon, can you tell us a bit about yourself? Well, I hold a Bachelor of Science and an MBA in Business Management from the University of Ben Gurion. Currently, I’m the Head of Data Engineering in the IT department, where we manage data and business insights both on the corporate and personal levels. What led to your decision to join Check Point? I joined Check Point nearly 26 years ago when it was the talk of the town in Israel’s cyber security scene. Check Point was a visionary, pioneering ERP infrastructure and being one of the first in Israel to…

The International Criminal Court (ICC) recently announced it was hit by a sophisticated cyberattack. The attack, detected late last week, has been contained, and the Court is now assessing its full impact. This incident, publicly confirmed on Monday, marks the second such major cyber security challenge for the ICC in recent years. Targeted Attack and Quick Response The ICC, located in The Hague, described the event as a “sophisticated and targeted cyber security incident.” Its internal alert systems quickly spotted the intrusion, allowing for swift confirmation and containment. An analysis is currently underway to understand the full effects across the…

Taiwan flags security risks in popular Chinese apps after official probe Pierluigi Paganini July 07, 2025 Taiwan warns Chinese apps like TikTok and WeChat pose security risks due to excessive data collection and data transfers to China. Taiwan National Security Bureau (NSB) warns that Chinese apps like TikTok, WeChat, Weibo, and Baidu Cloud pose security risks due to excessive data collection and data transfer to China, following an official inspection with law enforcement agencies. Following global concerns, the NSB coordinated with Ministry of Justice Investigation Bureau (MJIB) and the Criminal Investigation Bureau (CIB) under the National Police Agency to inspect…

Attack Surface Management (ASM) has become one of those buzzwords that gets used a lot but rarely explained in detail. The authors of this book offer a practical guide that aims to change that. About the authors Ron Eddings is the Executive Producer at Hacker Valley Media. Melody Kaufmann is a freelance cybersecurity writer, and holds a Master’s in Information Security. Inside the book Organizations are dealing with environments that are always changing. These include cloud platforms, SaaS apps, APIs, IoT devices, and various third-party services. The old security models simply don’t keep up anymore. The authors explain that ASM…

to each row of a DataFrame is a common operation. These operations are embarrassingly parallel: each row can be processed independently. With a multi-core CPU, many rows can be processed at once. Until recently, exploiting this opportunity in Python was not possible. Multi-threaded function application, being CPU-bound, was throttled by the Global Interpreter Lock (GIL). Python now offers a solution: with the “experimental free-threading build” of Python 3.13, the GIL is removed, and true multi-threaded concurrency of CPU-bound operations is possible. The performance benefits are extraordinary. Leveraging free-threaded Python, StaticFrame 3.2 can perform row-wise function application on a DataFrame at…

Take look at this chart from last year’s Verizon Data Breach Report.  It shows who notified the breached party when they were attacked. This graph is a sad indictment for all of us in the information protection industry.  This chart means that only about 1 in 8 times there’s a breach it’s found out by an internal party.  Of course this means that 7 times of those 8 it’s discovered by someone external to your organization.  That has got to hurt.  If you doubt me, just ask the PR firm or department of any breached organization. There’s two ways you…

While Cisco often focuses on business growth and market leadership, our most rewarding work happens when we set those metrics aside. These projects aren’t about driving profits — they’re about using our expertise to tackle challenges that benefit everyone. I want you to meet Dr. Hyrum Anderson, a senior director of AI & security in Cisco’s new Foundation AI team. Over the past several years, Hyrum has been obsessed with how artificial intelligence (AI) and machine learning (ML) are impacting the cybersecurity industry. During his time with Cisco and at Robust Intelligence before that, Hyrum has been on a self-proclaimed…