Author: HackWatchit

Demystifying Cyber Risk: How Qualys is Transforming Security Leadership Cybersecurity leadership is undergoing a profound transformation. No longer confined to technical silos, CISOs are becoming strategic partners who translate complex security challenges into business-relevant insights. For over two decades, Qualys has been at the forefront of solving the increasingly complex IT security landscape. Anu Kapil, Senior Product Manager for Policy, Audit, and Compliance Solutions, understands this challenge intimately. With a unique background bridging engineering and product management, she offers a nuanced perspective on the evolving cybersecurity ecosystem. “CISOs don’t need more dashboards,” Kapil emphasizes. “They have plenty of those. What…

Before they were taken down by Telegram, Xinbi Guarantee and Haowang Guarantee displayed similar posts offering explicitly illegal services in all those categories and more. Like the newly ascendant Tudou Guarantee, those other “Guarantee” marketplaces didn’t directly sell services, but instead offered escrow and deposit features that prevent vendors from defrauding customers.When WIRED asked Telegram in May about a report from Elliptic that focused on Xinbi Guarantee’s criminal offerings, Telegram responded with a broad purge: It banned not only Xinbi’s accounts but also those of Haowang Guarantee, the much larger market that had persisted for three years, enabled around $27…

The Linux Foundation launched the Agent2Agent (A2A) project, an open protocol for secure agent-to-agent communication and collaboration. The A2A protocol is a collaborative effort launched by Google in April and with growing support from more than 100 leading technology companies. The protocol addresses the growing need for agents to operate in dynamic, multi-agent environments, coordinating actions across a wide array of applications and data infrastructure. A2A enables autonomous agents to discover one another, exchange information securely and collaborate across systems. This allows developers and organizations to unite agents from multiple sources and platforms, improving modularity, mitigating vendor lock-in and accelerating…

The European Union is moving to strengthen its cybersecurity posture with the adoption of post-quantum cryptography. Backed by the European Commission, Member States have issued a roadmap and timeline to begin transitioning to this advanced form of encryption. The set of recommendations that Member States need to implement for a synchronised transition to post-quantum cryptography is divided into ‘First Steps’ that are required to initiate the transition, and ‘Next Steps’ that should follow. Following the Commission’s Recommendation issued last April, the EU move stems from a strategy developed by the NIS Cooperation Group and reflects growing urgency for Europe to…

David Fletcher // On a recent internal penetration test engagement, I was faced with using a Juniper VPN to access the target network. One small problem, Juniper does not formally support Linux operating systems. The Juniper Pulse and Pulse Secure clients are only available for Windows and OSX. Since I didn’t have an OSX system I would have been forced to give up several tools that are extremely useful. I did a fair amount of searching and found several solutions to the problem. However, many were somewhat complex and had a time investment requirement that just didn’t make sense for…

Topic: Attacking Container Infrastructure: Docker and Kubernetes Weaknesses Watch Now Abstract: Containers play a crucial role in digital transformation, enabling rapid deployment of cloud-native applications. Though considered secure, container systems have vulnerabilities that stem from the state of their configuration. As organizations increasingly adopt containerized environments to improve scalability and agility, threat actors are evolving to exploit weaknesses within the container infrastructure. In this webinar, we will explore pen testing for Docker and Kubernetes, which act as the backbone of modern DevOps pipelines. Through live demonstrations and case studies, this session will discuss how red teams detect and exploit vulnerabilities…

of abstraction built on top of fundamentally simple ideas, some agent framework devs seem to believe complexity is a virtue. I tend to go along with Einstein’s maxim, “Everything should be made as simple as possible, but not simpler”. So, let me show you a framework that is easy to use and easy to understand. OpenAI takes a refreshingly different approach to other framework developers : they don’t try to be clever, they try to be clear. In this article, I’ll show how you can build multi-agent apps using OpenAI’s open-source SDK. We’ll see how to construct a simple single-agent app…

In recent years, PDFs emerged as a primary vector for attack chains, with threat actors exploiting their ubiquity and complexity to deliver malware through sophisticated social engineering tactics. Recognizing this escalating threat, Check Point introduces PDFguard, an advanced AI engine designed to prevent malicious PDFs that employ deceptive tactics. Impressively, PDFguard has identified 25% more malicious files than its predecessor, most of which have never been seen before! The Growing Threat of Malicious PDFs Organizations generally use email and PDFs in standard business communications and are widely regarded as safe and reliable. This false sense of safety has resulted in…

Russia-linked APT28 use Signal chats to target Ukraine official with malware Pierluigi Paganini June 24, 2025 Russia-linked group APT28 uses Signal chats as an attack vector to phish Ukrainian officials with new malware strains. Russia-linked cyberespionage group APT28 is targeting Ukrainian government officials using Signal chats to deliver two new types of malware, tracked as BeardShell and SlimAgent. While Signal itself remains secure, attackers are exploiting its growing popularity in official communications to make their phishing attempts more convincing. In March–April 2024, during incident response within the information and communication system of a central executive body, Ukraine’s Computer and Emergency…