Author: HackWatchit

Cloud is the new battleground, and more adversaries are joining the fight: New and unattributed cloud intrusions were up 26% in 2024, according to the CrowdStrike 2025 Global Threat Report. As adversaries accelerate cloud attacks, CrowdStrike delivers full-cycle agentic AI — from detection triage to threat response — giving defenders the edge to act at machine speed before adversaries can break through. Cloud security tools often fall short in detecting and responding to these evolving attacks. While cloud workload protection (CWP) secures workloads, and security posture management tools identify misconfigurations, neither adequately investigates and responds to active cloud threats. Cloud…

car stops suddenly. Worryingly, there is no stop sign in sight. The engineers can only make guesses as to why the car’s neural network became confused. It could be a tumbleweed rolling across the street, a car coming down the other lane or the red billboard in the background. To find the real reason, they turn to Grad-CAM [1]. Grad-CAM is an explainable AI (XAI) technique that helps reveal why a convolutional neural network (CNN) made a particular decision. The method produces a heatmap that highlights the regions in an image that are the most important for a prediction. For…

As threats evolve in sophistication and frequency while cyber skills gaps persist, Security Operations Centres (SOCs) are increasingly turning to AI-driven platforms to enhance threat detection, streamline investigations, and automate responses. But which one is the best? Prophet Security (Best Overall) Prophet Security’s AI-native SOC platform deploys an “Agentic AI SOC Analyst” that autonomously triages, investigates, and responds to security alerts. Unlike traditional SOAR tools, Prophet’s AI dynamically plans and executes investigations, synthesizes evidence, and delivers actionable recommendations, adapting to each organization’s unique environment. Prophet Security was recently recognized in Redpoint’s prestigious InfraRed 100 list for its innovative agentic AI…

A high-severity vulnerability in ASUS Armoury Crate software could allow threat actors to escalate their privileges to SYSTEM level on Windows machines. The security issue is tracked as CVE-2025-3464 and received a severity score of 8.8 out of 10. It could be exploited to bypass authorization and affects the AsIO3.sys of the Armoury Crate system management software. Armoury Crate is the official system control software for Windows from ASUS, providing a centralized interface to control RGB lighting (Aura Sync), adjust fan curves, manage performance profiles and ASUS peripherals, as well as download drivers and firmware updates. To perform all these functions and provide low-level…

Jordan Drysdale // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. Step 1: Craigslist Step 2: Magic Time Step 3: Profit $$$$$$ I traveled to Scottsdale last year to enjoy some Citrus fruit around my uncle’s pool after deciding that my job was not exactly the best thing for my health. I had been working crazy hours, was bogged down…

New Predator spyware infrastructure revealed activity in Mozambique for the first time Pierluigi Paganini June 16, 2025 Insik Group analyzed the new Predator spyware infrastructure and discovered it’s still gaining users despite U.S. sanctions since July 2023. Despite earlier declines in activity due to U.S. sanctions and public exposure, Predator spyware has resurged. Insikt Group analyzed a renewed infrastructure linked to the commercial spyware company and identified a new customer in Mozambique, highlighting continued use of the surveillance tools, especially in Africa. Over half of Predator’s identified clients are on the continent, and links to a Czech entity suggest the…

DEFENSE ADVANCED RESEEARCH PROJECTS AGENCY The Johns Hopkins University Applied Physics Laboratory LLC, Laurel, Maryland,** has been awarded a ceiling $388,800,000 modification (P00007) to previously awarded, indefinite-delivery/indefinite-quantity contract HR001122D0001 with cost-plus-fixed-fee term and completion task orders contemplated for essential research, development, and engineering capabilities. The modification brings the total cumulative face value of the contract to $1,128,800,000 from $740,000,000. Work will be performed in Laurel, Maryland, with an expected completion date of November 2027 for all task orders. No funds are being obligated at the time of award. The Defense Advanced Research Projects Agency, Arlington, Virginia, is the contracting activity.…

NIST and the University of Colorado Boulder have created a public service that delivers random numbers using quantum mechanics. Called the Colorado University Randomness Beacon (CURBy), the system offers a daily stream of certifiable random numbers generated through a process that no one can predict or manipulate. Instrumentation for the quantum random number generator (Source: NIST) For security professionals, randomness is essential. But most systems use pseudo-random numbers, which are generated by algorithms and can be predicted or influenced. Even physical randomness, like coin flips, can show bias. “True randomness is something that nothing in the universe can predict in…

Howdy, Hackers! Welcome to the winners’ announcement for the #blockchain Writing Contest, presented by Aleph Cloud and HackerNoon! From February through May 2025, the contest challenged the writers, developers, and industry experts alike to discuss three important applications of decentralized technologies, #decentralized-ai, #decentralized-cloud, and #dePIN, for a shot at up to $2,000 as follows: Category Prize Best #decentralized-ai story $1000 Best #decentralized-cloud story $700 Best #dePIN story $300 Across all categories, the contest showcased thoughtful research, bold ideas, and brilliant storytelling. Stories published under relevant tags, for the duration of the contest, generated over 150,000 pageviews and hundreds of hours…