Author: HackWatchit

Securing the Digital Frontier: How Micro Storage Technology is Rewriting Cybersecurity Protocols The physical security of digital assets has long been the forgotten stepchild of cybersecurity strategy. While CISOs obsess over network perimeters and complex authentication protocols, a quiet revolution is happening in the world of micro storage technology that could fundamentally transform how we protect critical infrastructure and sensitive data. Swissbit, a German technology company, is at the forefront of this transformation. Their innovative approach to secure storage isn’t just about encryption – it’s about creating an entirely new paradigm of data protection that starts at the hardware level.…

Threat actors have been exploiting a zero-day vulnerability in legacy Sitecore deployments to deploy WeepSteel reconnaissance malware. The flaw, tracked under CVE-2025-53690, is a ViewState deserialization vulnerability caused by the inclusion of a sample ASP.NET machine key in pre-2017 Sitecore guides. Some customers reused this key in production, allowing attackers with knowledge of the key to craft valid, but malicious ‘_VIEWSTATE’ payloads that tricked the server into deserializing and executing them, leading to remote code execution (RCE). The flaw isn’t a bug in ASP.NET itself, but a misconfiguration vulnerability created by reusing publicly documented keys that were never meant for…

$10M reward for Russia’s FSB officers accused of hacking US Critical infrastructure Pierluigi Paganini September 04, 2025 US offers $10M for Russian FSB officers Tyukov, Gavrilov & Akulov, accused of attacking US critical infrastructure and over 500 energy firms worldwide. The US Department of State is offering up to $10M for info on FSB officers Pavel Aleksandrovich Akulov, Mikhail Mikhailovich Gavrilov, and Marat Valeryevich Tyukov, accused of hacking US infrastructure and over 500 energy firms. The officers aimed at obtaining and maintaining “unauthorized persistent access to hundreds of U.S. and international energy companies, thereby enabling the Russian government to disrupt…

or so, it has been impossible to deny that there has been an increase in the hype level towards AI, especially with the rise of generative AI and agentic AI. As a data scientist working in a consulting firm, I have noted a considerable growth in the number of enquiries regarding how we can leverage these new technologies to make processes more efficient or automated. And while this interest might flatter us data scientists, it sometimes seems like people expect magic from AI models, as if they could solve every problem with nothing more than a prompt. On the other…

Apple has kicked off the application period for the 2026 Security Research Device Program. White hat hackers interested in obtaining an iPhone that was specifically configured for security research can apply until October 31. Apple has been offering these ‘hackable’ iPhones to security researchers since 2020.  Through the Security Research Device Program, or SRDP, eligible researchers receive an iPhone that enables iOS security analysis without the need to bypass the security features that are enabled on a regular phone.  Those who are accepted into the program are given shell access to run any tools, and they get early previews of…

The best software developers I’ve had the privilege to work with live by the principle that they have ultimate responsibility for the code we introduce. They take ownership of what they write, review, and ship. They ask questions when they don’t understand what problem they are solving — sometimes uncomfortable questions that slow down meetings but save weeks later. The post The Developer’s Hippocratic Oath in the Age of AI appeared first on Security Boulevard.

Why is Indomobil Group using blockchain for education? Discover how their partnership with Space and Time is set to change payments and academic credentials for 50,000 Indonesian students.Read All

Securing the Digital Frontier: How AI is Reshaping Application Security The software development landscape is transforming at breakneck speed. Developers now generate code faster than ever, but this acceleration comes with a critical caveat: unprecedented security risks. Sudhir Patamsetti, Senior Director of Product Management at Harness, understands this digital paradox intimately. In an exclusive interview, he revealed the complex challenges facing modern cybersecurity professionals. “Security is considered an afterthought, and there’s been traditionally a lot of friction between development and security teams,” Patamsetti explains. This fundamental disconnect has created a dangerous vulnerability in how organizations approach software development. The Traditional…

A Visionary Leader in MDR In a crowded MDR market, independent analyst evaluations like The Forrester Wave™ give customers clarity and confidence. This Forrester Wave applies a rigorous and objective methodology that evaluates 11 providers in Europe for current offering, strategy, and customer experience. This process helps organizations cut through the noise and understand which MDR providers are the right ones for their needs. We believe being recognized as a Leader demonstrates that Falcon Complete Next-Gen MDR continues to set the pace for what MDR should deliver: expert-driven protection, cross-domain coverage, and outcomes that matter to customers. For CISOs and…