Author: HackWatchit
Cloud-native applications offer scalable, automated workflows, intelligent data processing, and seamless deployments. However, many organizations still struggle to manage their workflows effectively. Beneath polished interfaces and advanced features, many systems rely on scattered scripts, manual processes, and fragile pipelines that fail under pressure. When I first encountered the scale challenges in cloud-native applications over 15 years ago, I was struck by the paradox: cloud systems promise efficiency and scalability, but often, organizations struggle under the weight of fragmented, inefficient workflows. That moment pushed me to find better solutions, and today, I’m excited to share some insights I’ve gathered along the…
The FBI warns that threat actors are deploying malware on end-of-life (EoL) routers to convert them into proxies sold on the 5Socks and Anyproxy networks. These devices, which were released many years back and no longer receive security updates from their vendors, are vulnerable to external attacks leveraging publicly available exploits to inject persistent malware. Once compromised, they are added to residential proxy botnets that route malicious traffic. In many cases, these proxies are used by cybercriminals to conduct malicious activities or cyberattacks. “With the 5Socks and Anyproxy network, criminals are selling access to compromised routers as proxies for customers to…
South African Airways (SAA) announced that it has been impacted by a significant cyber incident that began on Saturday, temporarily disrupting access to the airline’s website, mobile application, and several internal operational systems, prompting swift response measures to mitigate its effects. The airline immediately activated its robust disaster management and business continuity protocols upon detection of the incident. “These swift actions successfully contained the incident and minimised disruption to core flight operations,” SAA said in a Tuesday media statement. “They also ensured the continued functionality of essential customer service channels, such as the airline’s contact centers and sales offices. Normal…
We’re thrilled to announce that Check Point Software Technologies has been named Best Threat Prevention Vendor of the Year by Cyber Strategists at GISEC 2025! This award recognizes organizations that lead the way in proactive cyber defense—identifying, stopping, and staying ahead of evolving threats. At the heart of Check Point’s recognition is ThreatCloud AI, our real-time cyber intelligence engine that powers predictive threat prevention across networks, cloud, endpoints, and beyond. ThreatCloud AI analyzes vast volumes of data across millions of sensors globally, delivering prevention-first security powered by artificial intelligence and deep threat insights. It stops advanced threats before they reach…
Peloton Interactive reported strong results Thursday (May 8) for the third quarter, surpassing guidance on key metrics and showcasing progress on profitability. The company also raised its full-year fiscal 2025 guidance across several key financial measures. CEO Peter Stern highlighted achieving key metrics, improving member outcomes, expanding market reach, and enhancing efficiency during the company’s earnings call on Thursday. Personalized Plans, introduced in January, have been started by nearly 500,000 members by the end of Q3. Engagement metrics indicated higher participation. The company observed year-over-year growth in running workouts (5%) and walking workouts (11%) engagement, with over 80% of Tread…
As new malware delivery campaigns using the ClickFix social engineering tactic are spotted nearly every month, it’s interesting to see how the various attackers are trying to refine the two main elements: the lure and the “instruction” page. In the latest email campaigns documented by the Google Threat Intelligence Group, the suspected Russian threat actor tried to trick the targets into downloading malware by urging them to “solve” a fake CAPTCHA page and then press a combination of keys that will execute a malicious PowerShell command without them knowing or noticing. While the FakeCAPTCHA variant of the ClickFix tactic is…
Bronwen Aker* // For those of you not fortunate enough to attend, this year’s Wild West Hackin’ Fest (WWHF) was phenomenal, featuring speakers from diverse aspects of information security, workshops, labs, and a killer CTF, all taking place at the Deadwood Mountain Grand, a Holiday Inn Resort Hotel, Casino, Spa and Event Center. In spite of its name, this year’s WWHF addressed more than just “hacking.” Given that Black Hills Information Security (BHIS) is best known for its penetration testing services, it’s no surprise that a lot of the talks dealt with pen testing tips, tricks, and traps. But there…
Cisco fixed a critical flaw in its IOS XE Wireless Controller Pierluigi Paganini May 08, 2025 Cisco addressed a flaw in its IOS XE Wireless Controller that could enable an unauthenticated, remote attacker to upload arbitrary files. Cisco released software updates to address a vulnerability, tracked as CVE-2025-20188 (CVSS score 10), in IOS XE Wireless Controller. An unauthenticated, remote attacker can exploit the flaw to load arbitrary files to a vulnerable system. An attacker can exploit this flaw by sending crafted HTTPS requests to the AP image download interface, potentially gaining root access and executing arbitrary commands. “A vulnerability in the…
The UK’s National Cyber Security Centre (NCSC) has warned the IT helpdesks of retailers to be on their guard against bogus support calls they might receive from hackers pretending to be staff locked out of their accounts. Read more in my article on the Exponential-e blog.