Author: HackWatchit

International Anti-Ransomware Day is observed annually on May 12th, following its official declaration by INTERPOL in 2022. The day serves as a crucial reminder for businesses to maintain updated data backups and have a disaster recovery plan in place—measures that are essential for minimizing downtime and data loss in the event of a ransomware attack, especially those involving double extortion tactics.This observance prompts an important question: What lessons should we draw from a globally recognized Anti-Ransomware Day, and why does it hold particular relevance for data-driven organizations, including small, medium, and large enterprises? The Origins of Anti-Ransomware DayThe date was…

Hey Hackers! Welcome back to another series of HackerNoon Company of The Week, where we spotlight the tech changemakers building the future, one block (or blockchain) at a time. This week, we’re thrilled to feature SORA, a radical reimagining of how economies can work in a decentralized world.SORA isn’t just another blockchain project- it’s an ambitious attempt to create a supranational economic system that serves everyone. Built on Parity Substrate and expanding across Kusama, Polkadot, and beyond via cross-chain bridges, SORA is laying the groundwork for a borderless financial ecosystem. At its heart is a Token Bonding Curve (TBC) that…

In early May 2025, Cisco released software fixes to address a flaw in its IOS XE Software for Wireless LAN Controllers (WLCs). The vulnerability, tracked as CVE-2025-20188, has a CVSS score of 10.0 and could enable an unauthenticated, remote attacker to upload arbitrary files to a susceptible system – but the real story is that this vulnerability drives home the persistent risks associated with hardcoded credentials, particularly JSON Web Tokens (JWTs), in network infrastructure components.  In this blog post, we’ll explore CVE-2025-20188, the concerning trend of hardcoded JWT secrets, and how Wallarm can help prevent these kinds of issues.  What…

A second wave of attacks against the hundreds of SAP NetWeaver platforms compromised via CVE-2025-31324 is underway. “[The] attacks [are] staged by follow-on, opportunistic threat actors who are leveraging previously established webshells (from the first zero-day attack) on vulnerable systems,” Onapsis warned last week. The second wave of attacks CVE-2025-31324 is a vulnerability in SAP NetWeaver’s Visual Composer tool that allows unauthenticated attackers to: Upload malicious files to the host system by sending carefully crafted POST requests to the /developmentserver/metadatauploader URL (endpoint) Execute commands with administrative permissions SAP released an emergency patch for CVE-2025-31324 on April 24, 2025, but several…

Kent Ickler & Jordan Drysdale // BHIS Webcast and Podcast This post accompanies BHIS’s webcast recorded on August 7, 2018, Active Directory Best Practices to Frustrate Attackers, which you can view below. The podcast version is available here. Also, the slides are available here: https://blackhillsinformationsecurity.shootproof.com/gallery/7214618/ Preface Active Directory out of the box defaults aren’t enough to keep your network safe.  Here’s the word on the street about frustrating attackers in your Active Directory environment. It’s easy to make things hard.  But it’s not hard to make things easy. Spin that how you will, running Active Directory efficiently isn’t necessarily easy, but it certainly…

With the digital transformation movement sweeping the world and cyber threats evolving simultaneously to pose greater and greater threats, today’s organizations are faced with two seemingly opposing imperatives. With the pathways to success and security seemingly diverging, Zero Trust Architecture has emerged to highlight a new way forward. Here, we’ll discuss how and shed some light on the critical relationship between Zero Trust security and digital adoption strategy. Our evolving security needs The past five years have seen a rapid acceleration in the expansion of digital infrastructures. Organizations everywhere, both commercial and governmental, have begun introducing a wider range of…

Announcing Cisco Secure Access China, Operated by Digital China Cloud Regulatory ambiguity. Compliance Risk. Cybersecurity threats. These daily realities are especially challenging for multinational companies. To support our customers’ growth in Mainland China and comply with the country’s cybersecurity and data protection laws, we are introducing our Secure Access China solution, operated in partnership with Digital China Cloud (DCC). It delivers cloud-based security for productivity and innovation, while easing compliance stress. Unlike some other global solutions, our approach is compliance-first to help organizations reduce their operational risk. What Compliance-First Means Purpose-built for China’s unique regulatory landscape, Secure Access China emphasizes…

Hunted Labs announced Entercept, an AI-powered source code security platform that gives enterprises instant visibility into suspicious behavior from the people and code in their software supply chain. Open source code and the people who write it are the unguarded entry point for cybercriminals aiming to inject ransomware, disrupt business, or commit espionage. As the use of open source code skyrockets, development and security teams face mounting pressure to find out who’s behind their code and determine whether they can be trusted. Entercept offers defense teams essential visibility to address these concerns effectively. “As software becomes the new battlefield, Entercept…

The Health Sector Coordinating Council (HSCC) Cybersecurity Working Group (CWG) highlighted the significant cybersecurity challenges facing America’s resource-constrained healthcare providers. A recent report noted that these challenges stem from a limited workforce and expertise, outdated systems, and inadequate funding. The report, submitted to the U.S. Department of Health and Human Services, the White House, and the House and Senate Rural Health Caucuses, urges both the government and the broader healthcare community to invest in workforce development, financial support, and strategic partnerships to strengthen cybersecurity and safeguard patient safety. In its report titled ‘On the Edge: Cybersecurity Health of America’s Resource-Constrained…