Author: HackWatchit

Check Point’s April 2025 malware report reveals increasingly sophisticated and hidden attacks using familiar malware like FakeUpdates, Remcos, and AgentTesla. Education remains the top targeted sector. Learn about the latest cyber threats and how to stay protected. Check Point Research (CPR) has revealed its findings for April 2025, which describe a concerning trend of attackers using more complex and sneaky methods to deliver harmful software. Although some well-known malware families remain prevalent, the methods used to infect systems are becoming more sophisticated, making them harder to detect. According to CPR, most attacks discovered in April involved phishing emails disguised as…

The National Cyber Security Centre (NCSC), part of GCHQ, unveiled two key initiatives aimed at strengthening the UK’s national cyber resilience. Announced at last week’s CYBERUK conference, these initiatives are designed to boost confidence in cyber defences across the public and private sectors. It detailed a new ecosystem of assured Cyber Resilience Test Facilities that will enable vendors to demonstrate and validate the cyber resilience of their products, and a Cyber Adversary Simulation (CyAS) scheme, launching this summer, will help organizations assess and enhance their ability to detect and respond to real-world cyber threats. “The Cyber Resilience Test Facilities and…

Highlights Microsoft is renegotiating the agreement with OpenAI to protect its $13 billion investment and ensure access to future new technologies as OpenAI explores a potential IPO. OpenAI is emerging as a competitor to Microsoft, launching its own consumer tools, APIs, and enterprise deals that overlap with Microsoft’s offerings. OpenAI’s attempt to balance its for-profit bent with its nonprofit mission When Microsoft first invested in OpenAI in 2019, it likely didn’t expect that the fledgling artificial intelligence (AI) research lab would become the juggernaut that it is today. That all changed when ChatGPT became a household word in…

recent years, WebAssembly (often abbreviated as WASM) has emerged as an interesting technology that extends web browsers’ capabilities far beyond the traditional realms of HTML, CSS, and JavaScript.  As a Python developer, one particularly exciting application is the ability to run Python code directly in the browser. In this article, I’ll explore what WebAssembly is (and its relation to the Pyodide library), talk about its benefits and everyday use cases, and dive into some practical examples of how you can use WebAssembly to run Python programs on the web. These tools can also benefit data scientists and ML professionals. Pyodide…

A new campaign employing ClickFix attacks has been spotted targeting both Windows and Linux systems using instructions that make infections on either operating system possible. ClickFix is a social engineering tactic where fake verification systems or application errors are used to trick website visitors into running console commands that install malware. These attacks have traditionally targeted Windows systems, prompting targets to execute PowerShell scripts from the Windows Run command, resulting in info-stealer malware infections and even ransomware. However, a 2024 campaign using bogus Google Meet errors also targeted macOS users. ClickFix targeting Linux users A more recent campaign spotted by Hunt.io…

Ethan Robish // WebSockets Overview WebSockets is a technology to allow browsers and servers to establish a single TCP connection and then asynchronously communicate in either direction. This is great for web apps as it allows real time updates without the browser needing to send hundreds of new HTTP polling requests in the background. It’s bad for pentesters as the tool support for WebSockets is not nearly as prevalent or sophisticated as for HTTP.   In addition to Burp Suite, a few other tools exist for dealing with WebSockets. I attempted to use each of these but none of them…

May 12 marks Anti-Ransomware Day, a global awareness initiative created by INTERPOL and Kaspersky to commemorate the 2017 WannaCry outbreak. That infamous ransomware campaign crippled hundreds of thousands of systems worldwide, from UK hospitals to global logistics networks, and its modern descendants are more dangerous, stealthier and relentlessly adaptive. While WannaCry marked a turning point, it was just the beginning of ransomware’s evolution into today’s multibillion dollar criminal enterprise. As we mark this year’s Anti-Ransomware Day, it’s time to look at how the threat has changed — and what lies ahead. From File Lockers to Full-Blown Extortion Ecosystems Ransomware has…

Threat actors use fake AI tools to deliver the information stealer Noodlophile Pierluigi Paganini May 12, 2025 Threat actors use fake AI tools to trick users into installing the information stealer Noodlophile, Morphisec researchers warn. Morphisec researchers observed attackers exploiting AI hype to spread malware via fake AI tools promoted in viral posts and Facebook groups. Users seeking free AI video tools unknowingly download Noodlophile Stealer, a new malware that steals browser credentials, crypto wallets, and may install remote access trojans like XWorm. The experts pointed out that Noodlophile Stealer is a previously undocumented malware. Noodlophile is being sold on…

Resecurity launched Resecurity One, the next-generation cybersecurity platform designed to improve how organizations approach cybersecurity. Resecurity One combines Digital Risk Management, Cyber Threat Intelligence, Endpoint Protection, Identity Protection, Supply Chain Risk Monitoring, and xDR capabilities into a unified solution, providing comprehensive protection against evolving cyber threats. Resecurity One is a breakthrough in cybersecurity technology that addresses the challenges faced by organizations of all sizes in managing multiple cybersecurity products. By integrating various cybersecurity functionalities into a single platform, Resecurity One simplifies cybersecurity operations, reduces fragmentation, and optimizes costs, enabling organizations to achieve significant return on investment (ROI) from their cybersecurity…