Author: HackWatchit

Check Point reports Silver Fox APT using a signed WatchDog driver flaw to disable Windows security and deliver ValleyRAT malware. Check Point Research has identified that the Silver Fox APT group is running a campaign that uses a Microsoft-signed but vulnerable driver to disable security processes on Windows 10 and 11, making it easier to install malware known as ValleyRAT. The vulnerable driver, named The WatchDog Antimalware driver, amsdk.sys version 1.0.600, had never been flagged by Microsoft’s Vulnerable Driver Blocklist or by community-driven efforts such as Living Off The Land Drivers (LOLDrivers). Silver Fox paired this driver with another older…

Cybercriminals are abusing Meta’s advertising platforms with fake offers of a free TradingView Premium app that spreads the Brokewell malware for Android. The campaign targets cryptocurrency assets and has been running since at least July 22nd through an estimated 75 localized ads. Brokewell has been around since early 2024 and features a broad set of capabilities that include stealing sensitive data, remote monitoring and control of the compromised device. Taking over the device Researchers at cybersecurity company Bitdefender investigated the ads in the campaign, which use the TradingView branding and visuals and lure potential victims with the promise of a…

China is preparing for one of the most anticipated and politically charged military events in recent years. On September 3, in Tiananmen Square, China will celebrate the 80th anniversary of the victory over Japan in World War II with a spectacular military parade that is not only a ritual of historical remembrance but also a message to the entire world to be prepared for the war of the future.President Xi Jinping and several foreign leaders and officials, including Vladimir Putin, will attend the ceremony. The Russian president’s presence is reported to have prompted several European ambassadors to consider defecting from…

A new research project called NetMoniAI shows how AI agents might reshape network monitoring and security. Developed by a team at Texas Tech University, the framework brings together two ideas: distributed monitoring at the edge and AI-driven analysis at the center. The work is still research stage, but it gives CISOs a sense of what could be possible if agentic AI systems make their way into enterprise environments. The project is open source, so it is also something the community can test and build on. Central controller architecture A layered design for detection and correlation The system is built around…

North Korea’s APT37 deploys RokRAT in new phishing campaign against academics Pierluigi Paganini September 01, 2025 ScarCruft (APT37) launches Operation HanKook Phantom, a phishing campaign using RokRAT to target academics, ex-officials, and researchers. Cybersecurity firm Seqrite Labs uncovered a phishing campaign, tracked as dubbed Operation HanKook Phantom, by the North Korea-linked group APT37 (aka Ricochet Chollima, ScarCruft, Reaper, and Group123). Threat actors are using a fake “National Intelligence Research Society Newsletter – Issue 52” PDF and a disguised malicious LNK file. When executed, the LNK downloads a payload or executes commands, compromising the system. The last stage malware employed in…

A scammer that spoofed a city supplier convinced employees in the City of Baltimore’s Accounts Payable Department to send two EFT payments totaling more than $1.5 million to a bank account they controlled and illustrating the ongoing threat posed by BEC fraud. The post Scammer Spoofs a City Supplier, Steals $1.5 Million from Baltimore appeared first on Security Boulevard.

Decentralized exchanges (DEX) processed a combined $1.15 trillion in spot and perpetual contract volumes during August, marking the first time monthly DEX activity surpassed the $1 trillion threshold.According to DefiLlama data, spot DEX volumes reached $506.3 billion in August, falling just $1.5 billion short of the all-time high of $507.8 billion recorded in January.The August figure represents an 18.4% increase from July’s trading activity, demonstrating sustained growth in on-chain spot trading.Perpetual contract volumes drove the record-breaking performance, reaching $648.6 billion in August, a 31.3% jump from July and an absolute all-time high for the derivative product category.The perpetuals surge accounted…

Belden has launched a new lineup of next-generation connectivity and cybersecurity products designed for critical applications. The releases include gel-free fiber cables, extended Ethernet reach solutions, and advanced OT (operational technology) network protection, aimed at supporting evolving automation needs and the growing demands of smart infrastructure. Belden’s Gel-Free Loose Tube Optical Fiber Cables feature a compact, resilient design that delivers robust connectivity while eliminating the need for messy gel compounds. These cables are engineered to resist moisture intrusion and provide long-term durability in demanding operational environments, and they are now available in the EMEA region. The St. Louis, Missouri-based company…

CISO Shift Technology | France | Remote – View job details As a CISO, you will develop and execute a comprehensive enterprise information security strategy aligned with company goals and risk tolerance. Lead incident response efforts and continuously improve detection, response, and recovery capabilities. Conduct risk assessments and implement appropriate mitigation strategies. CISO Demandbase | USA | On-site – View job details As a CISO, you will establish governance and technical controls to ensure safe AI adoption, protect model inputs and outputs, and maintain compliance with evolving AI-related regulations and frameworks. Partner with engineering and DevOps to embed security into…