Author: HackWatchit

A cloud-agnostic security approach decouples security from the underlying cloud infrastructure, ensuring that security policies and capabilities are universally applicable. Amazon Web Services, Microsoft Azure, Google Cloud, Oracle Cloud and more… organizations rely on these cloud service providers (CSPs) for flexibility and agility in the digital age. There’s a very high chance that your organization leverages multiple CSPs in order to avoid vendor lock-in, ensure geographic coverage, and help meet compliance standards. A 2025 Flexera report found that 86% of enterprises are running a multicloud strategy, with 70% of the respondents opting for a hybrid approach. Previous findings found that 82% of larger enterprises…

Cisco has found a backdoor account in yet another of its software solutions: CVE-2025-20309, stemming from default credentials for the root account, could allow unauthenticated remote attackers to log into a vulnerable Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) platforms and use the acquired access to execute arbitrary commands with the highest privileges. About CVE-2025-20309, and how to fix it Cisco Unified Communications Manager – formerly Cisco CallManager – is an IP call processing system, and Cisco Unified Communications Manager Session Management Edition incorporates session management services for simplifying services…

China-linked group Houken hit French organizations using zero-days Pierluigi Paganini July 03, 2025 China-linked group Houken hit French govt, telecom, media, finance and transport sectors using Ivanti CSA zero-days, says France’s ANSSI. France’s cyber agency ANSSI revealed that a Chinese hacking group used Ivanti CSA zero-days to target government, telecom, media, finance, and transport sectors. The campaign, active since September 2024, is linked to the Houken intrusion set, which overlaps with UNC5174 (aka Uteus), tracked by Mandiant. In September 2024, ANSSI identified a campaign exploiting Ivanti CSA zero-days to breach French entities across key sectors. The attack used a unique…

Popular AI chatbots powered by large language models (LLMs) often fail to provide accurate information on any topic, but researchers expect threat actors to ramp up their efforts to get them to spew out information that may benefit them, such as phishing URLs and fake download pages. Surfacing incorrect, potentially malicious URLs SEO poisoning and malvertising has made searching for login pages and software via Google or other search engines a minefield: if you don’t know how to spot fake/spoofed sites, you’ll get your credentials stolen and your devices infected. Partly because of this and partly because search engines have…

As Amazon Prime Day approaches (July 8-11, 2025), millions of shoppers are gearing up for what promises to be one of the biggest online shopping events of the year. But while you’re hunting for deals, cybercriminals may be hunting for you. A recent devastating case from Montana serves as a stark reminder that not all “Amazon” calls are what they seem. The $1 Million Nightmare: How It All Began In April 2025, an elderly Missoula woman received what seemed like a routine customer service call. The caller claimed to be from Amazon’s fraud department and asked if she had recently…

Cisco XDR is an infinitely extensible platform for security integrations. Like the maturing SOCs of our customers, the event SOC team at Cisco Live San Diego 2025 built custom integrations to meet our needs. You can build your own integrations using the community resources announced at Cisco Live. It was an honor to work with the XDR product management and engineering teams to publish these resources. For some background, we started using Splunk Attack Analyzer (SAA) at RSAC 2025 Conference and created a small dashboard tile to show some data for us to look at. It was also our first…

Frazer-Nash Consultancy released a detailed paper warning that space-based solar power (SBSP), which promises to deliver consistent, around-the-clock energy and generate significant revenue, could face a wave of cyber and physical threats. As nations increasingly view these power systems as a critical pillar of their energy infrastructure, the report explores the geopolitical, social, and security challenges surrounding their development, including sabotage, extortion, and public misconceptions, while outlining high-level risk mitigations to protect these systems in a contested orbit. Titled ‘Securing Space-Based Solar Power as Critical National Infrastructure,’ the Frazer-Nash document identified that SBSP systems represent a transformative technology with the…

Ondo Finance and Pantera Capital have launched a $250 million fund to accelerate investments in tokenized real-world assets (RWAs), Axios reported on July 3.According to the report, the fund, named Ondo Catalyst, will invest in equity stakes and tokens of projects developing tokenized versions of traditional financial assets.Ian De Bode, chief strategy officer at Ondo, told the newswire that the tokenization market is witnessing an “arms race” as exchanges and protocols expand into tokenized stocks and exchange-traded fund offerings.Recent initiatives reflect this momentum. Robinhood launched a layer-2 blockchain to enable European clients to trade tokenized US stocks and ETFs.In May,…

In May 2025, the U.S. government sanctioned a Chinese national for operating a cloud provider linked to the majority of virtual currency investment scam websites reported to the FBI. But a new report finds the accused continues to operate a slew of established accounts at American tech companies — including Facebook, Github, PayPal and Twitter/X. On May 29, the U.S. Department of the Treasury announced economic sanctions against Funnull Technology Inc., a Philippines-based company alleged to provide infrastructure for hundreds of thousands of websites involved in virtual currency investment scams known as “pig butchering.” In January 2025, KrebsOnSecurity detailed how Funnull…