Author: HackWatchit

The ransomware world isn’t just evolving—it’s fragmenting, decentralizing, and growing more dangerous. In this volatile landscape, DragonForce is emerging as one of the most intriguing and threatening actors of 2025. Born from possible hacktivist roots and now fully immersed in the economics of cyber crime, DragonForce represents a new era of hybrid threats: ideologically ambiguous, technologically agile, and fiercely opportunistic. A Ransomware Group Built for the Gig Economy DragonForce first appeared in December 2023 with the launch of its “DragonLeaks” dark web portal. Some researchers trace its lineage to DragonForce Malaysia, a long-standing hacktivist collective. But its current trajectory is…

Jordan Drysdale// tl;dr Both Cisco and Nessus have escalated the Smart Install Client Service feature/vulnerability. Nessus is now reporting the Smart Install RCE as critical. High five!!! Cisco has also packaged up a couple of associated bugs, one of which requires a firmware update. The first is seen below: Reference to this advisory is listed here: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 And, the latest update posted on 7-December-2018 lists the service as potentially dangerous and that the best practices configuration would not leave this service “lying around” for someone to stumble upon. While the screenshot and text as seen above suck, the point is…

Date: April 24, 2025Time: 8:30 AM CDT | 9:30 AM EDT | 7:00 PM ISTTopic: AI vs. Cyber Threats: The Future of Ethical Hacking Watch Now Abstract: As cyber threats grow increasingly sophisticated, integrating AI into ethical hacking is the need of the hour. With cyber attackers resorting to automation of cyber threats through AI, ethical hackers will also need to incorporate AI-powered ethical hacking tools to employ a more proactive security approach. This webinar explores how AI is reshaping ethical hacking by accelerating threat detection and enhancing penetration testing capabilities through automation and predictive analysis. The webinar will also discuss…

Sonardyne International Ltd, a marine technology company based in Hampshire, is one of only two UK companies to have been awarded a pair of prestigious King’s Award for Enterprise this year; typically, less than a handful of UK companies achieve two awards in a given year.  We are delighted to be one of 197 other organisations across the UK to have been recognised with a King’s Awards. Announced today (Tuesday 6 May), Sonardyne is recognised for its excellence in both Sustainable Development and International Trade.  Welcoming the Awards, Sonardyne Managing Director Graham Brown commented; ‘We’re absolutely delighted to have received…

“It is not the strongest of the species that survives, nor the most intelligent, but the one most responsive to change.” – Charles Darwin, Originator of Evolutionary Theory , I came across an article about a CEO, who was visibly frustrated with their company’s new AI assistant. The system could draft nice emails in seconds and answer generic questions quite well. But when asked for an update on a specific project, it just stalled. “Why can’t the AI assistant just pull up our data and show us what’s going on?” Despite its apparent sophistication, the AI assistant couldn’t access the…

In episode 49 of The AI Fix, OpenAI kills off a sycophantic bot, our hosts are introduced to a prophetic Bosnian rock band, Meta puts an electric fence around its llamas, Mark reveals he’s never tried covering a robot with olive oil, and Graham leaves a stern message for his great-great-grandchildren. Mark sits a “smarty-pants” test, an AI becomes a crime boss, and Graham explains how a decades-old typo is poisoning the scientific well. All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham Cluley and Mark Stockley. Powered by RedCircle Hosts:…

A proof-of-concept exploit has been publicly released for a maximum severity Apache Parquet vulnerability, tracked as CVE-2025-30065, making it easy to find vulnerable servers. The tool was released by F5 Labs researchers who investigated the vulnerability after finding that multiple existing PoCs were either weak or completely non-functional. The tool serves as proof of CVE-2025-30065’s practical exploitability and can also help administrators evaluate their environments and secure servers. Apache Parquet is an open-source, columnar storage format designed for efficient data processing, widely used by big data platforms and organizations engaged in data engineering and analytics. The flaw was first disclosed…

Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025-31324 Pierluigi Paganini May 06, 2025 Threat actors launch second wave of attacks on SAP NetWeaver, exploiting webshells from a recent zero-day vulnerability. In April, ReliaQuest researchers warned that a zero-day vulnerability, tracked as CVE-2025-31324 (CVSS score of 10/10), in SAP NetWeaver is potentially being exploited. Thousands of internet-facing applications are potentially at risk. The flaw in SAP NetWeaver Visual Composer Metadata Uploader stems from a lack of proper authorization checks. This means that unauthenticated attackers, those without valid credentials, can exploit it to upload malicious executable files to the…

Disney was hit by two major 2024 cyberattacks, an ex-employee’s sabotage and a hacker’s AI trap, exposing internal flaws and stealing 1.1TB of sensitive data. In two unrelated incidents, The Walt Disney Company has found itself the target of major cyber attacks from disgruntled former employees and external malicious actors. These cases, unfolding in 2024, involve a range of damaging activities, from menu sabotage to large-scale theft of confidential data. Michael Scheuer, Gaza, Former Disney Employee One of these incidents involved Michael Scheuer, a former menu production manager at Walt Disney World. Following his termination for misconduct in June 2024,…