Author: HackWatchit

ESET Research has identified a new threat group called GhostRedirector. In June 2025, this group broke into at least 65 Windows servers, mostly in Brazil, Thailand, Vietnam, and the United States. Countries where GhostRedirector victims were detected (Source: ESET) GhostRedirector used two custom tools that had not been documented before: a passive C++ backdoor called Rungan and a malicious IIS module called Gamshen. The group is very likely linked to China. Rungan can run commands on an infected server. Gamshen is designed to run SEO fraud as a service, manipulating Google search results to boost the ranking of specific websites.…

Network Security Reimagined: How Portnox is Solving the NAC Nightmare Security professionals have long wrestled with network access control (NAC) solutions that promise more pain than protection.  Traditional NAC deployments have been notorious for complex configurations, endless troubleshooting, and frustrated IT teams. Fortunately for us, Portnox, a cloud-native solution that’s rewriting the rulebook for network security. In an exclusive interview with Denny Leconte, CEO of Portnox, we uncovered a compelling narrative of how modern network access control can transform enterprise security without inducing administrative trauma. The NAC Problem: A Historical Perspective Network administrators have horror stories about NAC implementations. Cisco…

New data from Comparitech shows that of the 18 confirmed ransomware attacks in August, three hit manufacturers, two targeted healthcare companies, and another two struck the food and beverage sector. Overall, worldwide ransomware attacks rose from 473 in July to 506 in August, a 7% increase and the second consecutive month of growth after a decline from March through June 2025. While government systems remain a steady target, manufacturing recorded the sharpest rise, with attack claims surging 57% from 72 in July to 113 in August. Four of these incidents have been confirmed. August saw a first-of-a-kind attack on the…

Cloudflare mitigated the largest DDoS attack ever recorded, an 11.5 Tbps flood that lasted 35 seconds without disrupting online services. Cloudflare has successfully mitigated the largest DDoS attack (or distributed denial-of-service attack) recorded to date. The attack peaked at 11.5 terabits per second and lasted roughly 35 seconds before being neutralised without disrupting services. According to Cloudflare, the attack took the form of a massive UDP flood. While early analysis pointed to Google Cloud as a major source of the traffic, further investigation showed that it was generated by a mix of compromised Internet of Things (IoT) devices and multiple…

U.S. CISA adds WhatsApp, and TP-link flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 03, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WhatsApp, and TP-link flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added WhatsApp, and TP-link flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability CVE-2025-55177 Meta Platforms WhatsApp Incorrect Authorization Vulnerability CVE-2020-24363 (CVSS 8.8) is a missing authentication flaw in TP-Link TL-WA855RE Wi-Fi extender, enabling unauthenticated attackers on the same network to factory reset the…

The U.S. Department of State is offering a reward of up to $10 million for information on three Russian Federal Security Service (FSB) officers involved in cyberattacks targeting U.S. critical infrastructure organizations on behalf of the Russian government. The three individuals, Marat Valeryevich Tyukov, Mikhail Mikhailovich Gavrilov, and Pavel Aleksandrovich Akulov, are part of the FSB’s Center 16 or Military Unit 71330, which is tracked as Berserk Bear, Blue Kraken, Crouching Yeti, Dragonfly, and Koala Team. In March 2022, the three FBS officers were also charged for their involvement in a campaign that took place between 2012 and 2017, targeting U.S.…

that testing our code is a crucial and essential part of the software development life cycle. This is perhaps even more important when we’re discussing AI and ML systems, where an inherent uncertainty and hallucinatory element are potentially already baked in from the outset. And within that general testing framework, testing code that behaves differently based on the current date or time can be a real headache. How do you reliably check logic that triggers only at midnight, calculates relative dates (“2 hours ago”), or handles tricky situations like leap years or month-ends? Manually mocking Python’s datetime module can be…

CrowdStrike data scientists are members of a team of cybersecurity researchers that recently released EMBER2024, an update to EMBER, the popular open source malware benchmark dataset originally released in 2018.  The EMBER2024 dataset includes metadata, labels, and calculated features for over 3.2 million files from six different file formats. It provides data scientists conducting cybersecurity research with an extensive, modern dataset to support the training and evaluation of machine learning models for malware detection, including a collection of advanced malware that has demonstrated its ability to evade antivirus products.  An academic paper, EMBER2024: A Benchmark Dataset for Holistic Evaluation of…

Network Visibility: The Silent Guardian of Cybersecurity Network complexity is killing enterprise security teams. Buried under mountains of configuration data, manual processes, and endless troubleshooting, cybersecurity professionals are drowning in a sea of technological chaos. Enter NetBrain: A Revolutionary Approach to Network Observability Modern CISOs face unprecedented challenges in maintaining network integrity. Traditional monitoring tools have become obsolete, unable to keep pace with rapidly evolving infrastructure and sophisticated threat landscapes. Nigel Hickey, Senior Technical Marketing Manager at NetBrain, understands this challenge intimately. “The need was always about visibility and stopping repetitive actions of network engineers,” he explains. The Digital Twin:…