Author: HackWatchit

Cybercriminals are exploiting the growing interest in open source AI models by disguising malware as a legitimate installer for DeepSeek. Victims are unwittingly downloading the “BrowserVenom” malware designed to steal stored credentials, session cookies, etc and gain access to cryptocurrency wallets. How are the bad guys spreading the malware? By buying Google ads… sigh… which point to a fake DeepSeek download page. Sign up to our free newsletter.Security news, advice, and tips. Google says it has suspended the advertiser’s account. No doubt the cybercriminals won’t… oh, i don’t know… just create another account and try again, perhaps? I think it…

Here’s a look at the most interesting products from the past week, featuring releases from Contrast Security, Cymulate, Lemony, SpecterOps, Thales, and Vanta. Lemony mitigates privacy and compliance risks associated with cloud-based AI With Lemony, different teams can run their own nodes or clusters of nodes and securely connect them. This enables teams to share knowledge across the organization, but only at the depth permitted by defined AI access policies. In other words, teams can tap into the expertise of others while maintaining strict control over what GenAI-generated knowledge is accessible. Cymulate streamlines threat detection with AI-powered detection engineering assistant…

of activity in the AI world over the last few weeks, a recent important announcement by Streamlit that it now supports OpenID Connect (OIDC) login authentication almost passed me by.  User authorisation and verification can be a crucial consideration for data scientists, machine learning engineers, and others involved in creating dashboards, machine learning proofs of concept (PoCs), and other applications. Keeping potentially sensitive data private is paramount, so you want to ensure that only authorised users can access your app. In this article, we’ll discuss this new feature of Streamlit and develop a simple app to showcase it. Our app…

Step One: Power. Step Two: Enter. Step Three: ???? Step Four: Profit. In the security industry, we love our encryption. However sometimes, the complexity introduced by encryption can bite us down the road. A serious case of this was announced last Friday (November 11th) at DeepSec 2016 in Vienna. CVE-2016-4484: After powering on most Linux computers with hard drive encryption enabled (LUKS), you can make your way into a root shell by simply holding down the enter key. Alright that sounds bad, and it is. However, the shell you are presented with is severely stripped down, and the encrypted disks…

The Anubis ransomware-as-a-service (RaaS) operation has added to its file-encryptimg malware a wiper module that destroys targeted files, making recovery impossible even if the ransom is paid. Anubis (not to be confused with the same-name Android malware with a ransomware module) is a relatively new RaaS first observed in December 2024 but became more active at the beginning of the year. On February 23, the operators announced an affiliate program on the RAMP forum. A report from KELA at the time explained that Anubis offered ransomware affiliates an 80% share of their proceeds. Data extortion affiliates were offered a 60%, and initial access brokers a 50% cut. Currently, Anubis’ extortion…

Our whole universe was in a hot, dense stateThen nearly fourteen billion years ago, expansion started, waitThe Earth began to coolThe autotrophs began to droolNeanderthals developed toolsWe built a wall (We built the pyramids)Math, science, history, unraveling the mysteryThat all started with the Big Bang (Bang) Recognize the lyrics above?Fans of the big bang theory tv series would have a nostalgic smile decorating their faces right now. Whether you are a fan or not though, everyone will be carried along on this exciting performance of an article. The Big Bang Theory is a comic tv series that aired from 2007…

Trend Micro fixes critical bugs in Apex Central and TMEE PolicyServer Pierluigi Paganini June 13, 2025 Trend Micro fixed multiple vulnerabilities that impact its Apex Central and Endpoint Encryption (TMEE) PolicyServer products. Trend Micro address remote code execution and authentication bypass vulnerabilities impacting its Endpoint Encryption (TMEE) PolicyServer and Apex Central solutions. Trend Micro Endpoint Encryption PolicyServer is a centralized management server used in Trend Micro’s Endpoint Encryption solution. It acts as the core component for managing and enforcing encryption policies across all endpoints in an organization. “Trend Micro has released a patch for the Trend Micro Endpoint Encryption PolicyServer…

The National Institute of Standards and Technology (NIST) has released a new guide that offers practical help for building zero trust architectures (ZTA). The guidance, titled Implementing a Zero Trust Architecture (SP 1800‑35), includes 19 example setups using off‑the‑shelf commercial tools. The new guidance is the result of work by NIST’s National Cybersecurity Center of Excellence (NCCoE). Over four years, 24 industry partners including major tech companies helped build, install, test, and document 19 ZTA models. These illustrate a range of scenarios: hybrid cloud setups, branch offices, and even public Wi‑Fi use at coffee shops. Each model comes with: Technical…

How Can NHIs Serve as the Crucial Backbone in Overall System Protection? What if there was a foolproof method for safeguarding your organization’s systems and data from potential threats? A diligent layer of security that offers complete visibility and control over system vulnerabilities? The answer lies in the competent management of Non-Human Identities (NHIs) and Secrets. My insights are based on industry trends and data-driven research – pointing towards NHIs as a robust and reliable defense mechanism. Digging Deeper into the Concept of NHIs An NHI is a machine identity used. They are forged by pairing a ‘Secret’ – an…