Author: HackWatchit

Silver Spring, United States, June 4th, 2025, CyberNewsWire Aembit, the workload identity and access management (IAM) company, today announced its inclusion in Rising in Cyber 2025, an independent list launched by Notable Capital to spotlight the 30 most promising cybersecurity startups shaping the future of security. Unlike traditional rankings, Rising in Cyber 2025 honorees were selected through a multi-stage process grounded in real-world validation. Leading cybersecurity venture firms submitted nominations, and nearly 150 chief information security officers (CISOs) and senior security executives voted on the final list, highlighting the companies solving the most urgent challenges facing today’s security teams. Aembit…

Your business depends on APIs, which are essential for contemporary digital experiences, encompassing everything from mobile applications and IoT devices to the rapidly evolving AI landscape. With more than 80% of internet traffic now routed through APIs—a number projected to rise significantly due to AI developments—their security is crucial. Unfortunately, this vital infrastructure faces growing attacks, with these threats being a real and current danger to many. The remarkable increase in such incidents serves as a wake-up call: a majority, 64% of organizations, have encountered an API attack or security breach in just the past year. This widespread threat landscape…

Cobalt announced a set of product enhancements within the Cobalt Offensive Security Platform aimed at helping customers scale security testing with greater clarity, automation, and control. These innovations further the company’s commitment to deliver expert-driven, fast-to-launch pentesting, now with even richer data and streamlined workflows. The Cobalt Platform centralizes access to security services from a team of expert pentesters, making it easier to find and fix vulnerabilities across an organization’s environments. By enabling faster pentest launches, real-time collaboration with testers, continuous scanning, and seamless integration with remediation workflows, Cobalt helps security teams of all sizes identify their critical issues and…

Today, your internet presence is much more than just a website or social media profile, it’s like your business card, reputation and main medium of staying connected. However, with this visibility comes genuine danger. Do you know what’s one of the most troublesome threats hiding out there? DDoS attacks! If you have not heard this term before, no need to worry. Let’s simplify it and understand how to protect your online space from it. DDoS: What it Means DDoS is short for Distributed Denial of Service. It may sound complicated, but basically, it means overwhelming a server or website with…

Joff Thyer // I was recently working on a Red Team for a customer that was very much up to date with their defenses. This customer had tight egress controls, perimeter proxying, strong instrumentation, and very tight application whitelisting controls. My teammate and I knew that we would have to work very hard to get command and control outbound from this environment, and that would be after obtaining physical access (yet another significant challenge). The week before going on-site, we began to research all of the various methods for potential application whitelisting bypass. We assumed the best case defensive scenario whereby…

U.S. CISA adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 04, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability CVE-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability This week, Qualcomm addressed the above zero-day vulnerabilities that, according to the company, have been exploited in limited, targeted attacks in the wild. Google Android Security team reported…

Hundreds of emails and internal documents reviewed by WIRED reveal top lobbyists and representatives of America’s agricultural industry led a persistent and often covert campaign to surveil, discredit, and suppress animal rights organizations for nearly a decade, while relying on corporate spies to infiltrate meetings and functionally serve as an informant for the FBI.The documents, mostly obtained through public records requests by the nonprofit Property of the People, detail a secretive and long-running collaboration between the FBI’s Weapons of Mass Destruction Directorate (WMDD)—whose scope today includes Palestinian rights activists and the recent wave of arson targeting Teslas—and the Animal Agriculture…

Date: May 22, 2025Time:8:30 AM CDT | 9:30 AM EDT | 7:00 PM ISTTopic: From Reactive to Proactive: Using AI to Strengthen Ethical Hacking Watch Now Abstract: As cyberattackers incorporate advanced technologies for their hacking efforts, security strategies must evolve from reactive to proactive to keep pace. With current cybersecurity capabilities struggling to defend against sophisticated attack vectors, AI-driven proactive security offers a viable path to advance security capabilities. This fourth session of the CEH webinar series will explore how AI-driven strategies elevate ethical hacking from reactive to proactive—empowering ethical hackers to identify, detect, and mitigate vulnerabilities before they can…

In part 1 of this series we spoke about creating re-usable code assets that can be deployed across multiple projects. Leveraging a centralised repository of common data science steps ensures that experiments can be carried out quicker and with greater confidence in the results. A streamlined experimentation phase is critical in ensuring that you deliver value to the business as quickly as possible. In this article I want to focus on how you can increase the velocity at which you can experiment. You may have 10s–100s of ideas for different setups that you want to try, and carrying them out…