Author: HackWatchit

ClickFix, a deceptive attack method, saw a surge of more than 500% in the first half of 2025, making it the second most common attack vector after phishing, according to ESET’s latest Threat Report. The report, which looks at trends from December 2024 to May 2025, found that ClickFix accounted for nearly 8% of all blocked attacks during this period. Fake reCAPTCHA check instructing the victim to paste and execute a malicious command on their device (Source: ESET) ClickFix attacks trick users by showing a fake error message that gets them to copy, paste, and run harmful commands on their…

Check Point Research identifies the first documented case of malware embedding prompt injection to evade AI detection. Check Point Research discovered the first known case of malware designed to trick AI-based security tools The malware embedded natural-language text into the code that was designed to influence AI models into misclassifying it as benign While the evasion attempt did not succeed, it signals the emergence of a new category of threats: AI Evasion The discovery highlights how attackers are adapting to the growing use of generative AI in malware analysis and detection workflows Malware authors have long evolved their tactics to…

Joff Thyer // Recently I have been thinking about online challenges I encounter in daily life.   As I thought about it, I realized that many of these items I practice on a regular basis.  While it feels pretty intuitive to me to follow these guidelines, it may not feel as mainstream to many others so I thought I would write some things down.   Adopt a mindset that there will be a business that gets compromised and that you have provided some of your data to in the past.  How are you going to mitigate the risk to your…

U.S. CISA adds AMI MegaRAC SPx, D-Link DIR-859 routers, and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 26, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds AMI MegaRAC SPx, D-Link DIR-859 routers, and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added AMI MegaRAC SPx, D-Link DIR-859 routers, and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2024-54085 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CVE-2024-0769 D-Link DIR-859 Router Path Traversal Vulnerability CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials…

As the attack surface expands and the number of vulnerabilities grows, organizations face a new crisis: how to prioritize which vulnerabilities to fix first based on their level of risk. CrowdStrike Falcon® Exposure Management addresses this challenge with new AI-powered capabilities to help defenders identify what matters most and take action with precision. New innovations include AI-powered Asset Criticality, Client-Side Attack Path Analysis, and a CrowdStrike Falcon Next-Gen SIEM integration. Combined with the power of ExPRT.AI, our proprietary exploit prediction engine, these capabilities help teams identify and fix the riskiest vulnerabilities first. Too Many Vulnerabilities, Not Enough Guidance In 2024,…

Topic: Data Privacy and Protection: Strategies to Secure Sensitive Information Watch Now Abstract: In the current digital landscape, protecting sensitive information, such as personally identifiable information (PII) and intellectual property, is a top priority for organizations to maintain compliance with global regulations. This webinar will explore the data privacy and protection framework and the numerous underlying data and information security strategies. It will also cover scalable, agile security strategies to help organizations safeguard data across various digital environments amid growing cyber threats. Attendees will also gain insights into best practices for identifying sensitive data, minimizing exposure risks, implementing access controls,…

development lately with large language models (LLMs). A lot of the focus is on the question-answering you can do with both pure text-based models, or vision-language models (VLMs), where you can also input images. However, there is another dimension that has evolved a ton over the last few years: Audio. Models that can both transcribe (speech -> text), speech synthesis (text -> speech), and also speech-to-speech, where you have a whole conversation with a language model, with audio going both in and out. The arcitecture and and training pipeline for OpenAI’s Whisper model. Image from OpenAI Whisper GitHub repository with…

Forescout Technologies disclosed that 57 percent of organizations deploy more than three separate tools to monitor IT, OT (operational technology), and IoT (Internet of Things) environments, resulting in fragmented insights and elevated operational complexity. Vulnerability prioritization (49 percent) and risk mitigation (44 percent) are cited as the most resource-intensive processes, exacerbated by fragmented asset inventories, limited visibility, and legacy infrastructure.  In the ‘Global Industrial Cybersecurity Benchmark 2025,’ a global study by Takepoint Research and sponsored by Forescout, nearly 60 percent of organizations admitted they have little to no confidence in detecting threats across their OT and IoT environments. Just 14…

Rick Wisser // All right, you’ve taken all the precautions related to your network. You have lockout controls in place, you use awesome password policies (20 characters with uppercase, lowercase, special characters, and wingdings…. ) Two factor is everywhere, web apps are locked down, cross-site-scripting and SQL injection are not viable. You are feeling good about the security of your infrastructure. So why may you still be worried (other than you are a systems admin)? It seems like Social Engineering is becoming the new attack vector these days.  Why?  Because it is easier to find out information on specific people…