Author: HackWatchit

The U.S. House Committee on Homeland Security held a markup on Wednesday to consider legislation aimed at preserving key cybersecurity tools, enhancing public safety, strengthening the Department of Homeland Security (DHS)’s counterterrorism mission, improving intelligence sharing, and defending critical infrastructure. The committee advanced measures, including a positive recommendation to extend the soon-to-expire Cybersecurity Information Sharing Act of 2015 (CISA 2015). Andrew R. Garbarino, a New York Republican and House Committee on Homeland Security Chairman, also introduced a bill, titled ‘Widespread Information Management for the Welfare of Infrastructure and Government Act,’ or the WIMWIG Act, which seeks reauthorization of the CISA…

Wilmington, United States, September 4th, 2025, CyberNewsWire Veteran email security leader to expand MSP and VAR partnerships and accelerate DMARC adoption.  Sendmarc today announced the appointment of Rob Bowker as North American Region Lead. Bowker will oversee regional expansion with a focus on growing the Managed Service Provider (MSP) partner community, developing strategic Value-Added Reseller (VAR) partnerships, and broadening the enterprise customer base.  Bowker brings more than two decades of experience in email infrastructure, deliverability, and security. He has helped organizations implement and scale Domain-based Message Authentication, Reporting and Conformance (DMARC), Sender Policy Framework (SPF), and DomainKeys Identified Mail (DKIM)…

Google has provided fixes for over 100 Android vulnerabilities, including CVE-2025-48543 and CVE-2025-38352, which “may be under limited, targeted exploitation.” Among the fixed flaws is also CVE-2025-48539, a critical vulnerability in the System component that “could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed and no user interaction required.” The exploited vulnerabilities CVE-2025-48543 affects the Android Runtime – the application runtime environment used by Google’s mobile operating system. CVE-2025-38352 is a race condition in Android’s Linux kernel. Both vulnerabilities could lead to local escalation of privilege with no additional execution privileges needed, and require no user…

Whether it’s a pandemic, war, or natural disaster, one thing is certain: disruption is inevitable. For information security professionals, the important question is whether your network is ready to keep operations running securely. There are two essential tactics you can use to keep things running: provision additional VPN capacity for remote connections or adopt a secure access service edge (SASE) solution. Both are workable strategies, but each has its own strengths and weaknesses that can lead your company to a state of readiness, or alternatively, leave you facing significant operational risk. Before diving into solutions, step back: are you thinking…

President Trump has issued a message marking September as National Preparedness Month, emphasizing his administration’s commitment to strengthening disaster readiness across the country. In the statement, released by the White House on September 2, 2025, Trump reflected on the toll of recent hurricanes, floods, and wildfires, praised first responders, and called on Americans to take steps to prepare their families and communities for emergencies. He also contrasted his administration’s approach to preparedness and response with that of his predecessor, while outlining federal actions taken since he returned to office. Below is the full message: This National Preparedness Month, my Administration…

The enterprise landscape has transformed. Work happens anywhere, on managed and unmanaged devices, across SaaS apps, AI tools, cloud environments and networks. The traditional perimeter has dissolved, while adversaries armed with AI now launch faster, more sophisticated attacks that can bypass proxies and WAFs. They hide in encrypted traffic, assemble malware directly in the browser and exploit DNS at scale. At the same time, sensitive data flows across countless channels (structured and unstructured), documents, source code and AI-generated content. Traditional security struggles to keep up, while fragmented point tools slow users and create risky workarounds. Prisma® SASE 4.0 is engineered…

Darktrace reports new malware hijacking Windows Character Map for cryptomining, exposing risks of hidden attacks in everyday software processes. Cybersecurity artificial intelligence firm, Darktrace, has shared details of a sophisticated campaign that hijacks everyday Windows software to secretly mine cryptocurrency. The research was led by Cyber Analyst Keanna Grelicha and Threat Research Lead Tara Gould, and shared with Hackread.com This type of attack is called cryptojacking, in which a device’s processing power is utilised to mine cryptocurrency for the attackers, leading to bigger electricity bills and slower performance for the victim. According to Darktrace’s blog post, in July 2025, specifically…

As cybersecurity threats continue to evolve, the Government of Canada is taking steps to protect sensitive but unclassified information that must be exchanged with defense contractors. This is an essential step in strengthening the security postures of the Government and its suppliers, as hackers can potentially execute supply chain attacks if they gain access to one or more systems associated with Government contracting processes. Consequently, the Government is developing a new cybersecurity standard called the Canadian Program for Cyber Security Certification, or CPCSC. This standard will apply to any organization that bids on defense contracts for the Government of Canada. While…

Severe Hikvision HikCentral product flaws: What You Need to Know Pierluigi Paganini September 04, 2025 Hikvision HikCentral flaw allows unauthenticated users to gain admin rights, risking full control over configs, logs, and critical monitoring. Security researchers warn of three vulnerabilities impacting Hikvision HikCentral, which is a centralized management software used across many industries for video surveillance, access control, and integrated security operations. The three vulnerabilities are: CVE-2025-39245 – Base score: 4.7 – There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands via malicious CSV data. CVE-2025-39246 – Base…