Author: HackWatchit

Hybrid cloud infrastructure is under mounting strain from the growing influence of AI, according to Gigamon. Cyberthreats grow in scale and sophistication As cyberthreats increase in both scale and sophistication, breach rates have surged to 55% during the past year, representing a 17% year-on-year rise, with AI-generated attacks emerging as a key driver of this growth. Security and IT teams are being pushed to a breaking point, with the economic cost of cybercrime now estimated at $3 trillion worldwide according to the World Economic Forum. As AI-enabled adversaries grow more agile, organizations are challenged with ineffective and inefficient tools, fragmented…

The FBI has issued a warning to US law firms about a rising cyber threat targeting the legal sector. A group known as Silent Ransom Group (SRG), also called Luna Moth or Chatty Spider, has been focusing its attacks on law firms since early 2023, using a combination of phishing emails and social engineering calls to gain access to sensitive legal data. This group is no newcomer. Operating since 2022, SRG has a track record of targeting industries such as healthcare and insurance. But in recent months, law firms have become their top target, likely because of the sensitive client…

Lovable, which is a Vibe coding tool, says Claude 4 has reduced its errors by 25% and made it faster by 40%. On May 22, Anthropic started rolling out two new models: Claude Sonnet 4 and Claude Opus 4. While Sonnet is available for free users, Opus requires a paid subscription and is able to do better than Sonnet when it comes to coding. In a blog post, Anthropic confirmed that Claude Opus 4 scored 72.5 percent in SWE-bench (SWE is short for Software Engineering Benchmark). In the tests, Opus 4 delivered sustained performance on long-running tasks that require focused effort and thousands of…

Security Affairs newsletter Round 525 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini May 25, 2025 A new round of the weekly Securitythe weekly Security Affairs newsletterAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Silent Ransom Group targeting law firms, the FBI warnsLeader of Qakbot cybercrime network indicted in U.S. crackdownOperation RapTor led to the arrest of 270 dark web vendors and buyersChinese threat actors exploited Trimble Cityworks flaw to breach U.S. local government networksU.S. CISA adds…

Brian Fehrman // Privilege escalation is a common goal for threat actors after they have compromised a system. Having elevated permissions can allow for tasks such as: extracting local password-hashes, dumping clear text credentials from memory, and installing persistent back doors on the system. Insecurely-configured Windows Services can be one avenue for privilege escalation. Windows Services typically run under the context of an elevated user. If you can get the service to run your malicious program, your program will likely run with elevated permissions. This blog post discusses two obstacles that might arise when attempting to exploit Windows Services. Local…

A former Federal Reserve economist is accused of passing government information to China. John Rogers allegedly shared reports, such as information prepared for meetings by the rate-setting Federal Open Market Committee, with his Chinese handlers, The Wall Street Journal (WSJ) reported Saturday (May 24), citing court records. The FBI arrested Rogers, who left the Fed in 2021, in January and found $50,000 in cash at his Washington-area apartment, though his wife said the money belonged to her.  Prosecutors allege that Chinese intelligence first made contact with Rogers in 2013. That’s when an agent, posing as a grad student, reached out…

It’s tough to keep tabs on the ever-changing crypto gaming space, thanks to the constant flow of news: everything from big game launches and fun degen experiments to token price swings and occasional project collapses. It’s a lot to follow.Luckily, we’re plugged in at Decrypt’s GG. We cover the biggest happenings throughout the week, and then this weekly roundup provides a quick way to catch up, as well as find a bunch of other little bits of news from throughout the week.Top storiesOff the Grid NFT sales, Steam plans: Avalanche-powered battle royale shooter game Off the Grid is gradually transitioning…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with the National Security Agency (NSA), Federal Bureau of Investigation (FBI), and international partners, has issued a joint cybersecurity advisory exposing a Russian state-sponsored cyber espionage campaign. The operation, attributed to the Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center military Unit 26165, has been targeting technology and logistics companies, including those supporting the transport and delivery of foreign aid to Ukraine, for more than two years. The cybersecurity industry offers overlapping threat intelligence, indicators of compromise, and mitigation strategies related to GRU unit 26165. Although not…

Jordan Drysdale// Physical Pentest Upcoming? Bring a Badgy. While badge reproduction may not be the intended use of this product, if you are a physical tester and you don’t own one, you need to get one. https://www.badgy.com/products/badgy-200.html While stuffing this thing in my suitcase was the obvious choice, maybe in the future I’ll avoid the TSA’s standard loveletter and just ship it. During an onsite and depending on the time constructs, wandering around outside customer facilities can often lead to an information disclosure situation that is rarely protected by steadfast data controls. If you can identify a badge, the next…