Author: HackWatchit

Cybersecurity vendor BeyondTrust launched this week the new Identity Security Risk Assessment, a free service designed to illuminate identity attack surfaces, so organizations can better manage risk and reduce vulnerabilities. This initiative underscores BeyondTrust’s commitment to support companies worldwide in understanding and mitigating identity-based security threats. The combination of diverse, but hyper-connected, identity landscapes- spanning cloud, hybrid, and on-premise environments- and the proliferation of identities, accounts, and entitlements has pushed effective identity security out of reach for most organizations. While identity is the connective tissue that enables modern work, it’s also the vector attackers exploit most to breach organizations, with…

U.S. CISA adds SonicWall SMA100 and Apache HTTP Server flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 02, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SMA100 and Apache HTTP Server flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2024-38475 Apache HTTP Server Improper Escaping of Output Vulnerability CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability This week, SonicWall revealed that attackers actively exploited two…

Graphs are relevant A Knowledge Graph could be defined as a structured representation of information that connects concepts, entities, and their relationships in a way that mimics human understanding. It is often used to organise and integrate data from various sources, enabling machines to reason, infer, and retrieve relevant information more effectively. In a previous post on Medium I made the point that this kind of structured representation can be used to enhance and perfect the performances of LLMs in Retrieval Augmented Generation applications. We could speak of GraphRAG as an ensemble of techniques and strategies employing a graph-based representation of…

In brief Analysts remain upbeat on Strategy (MSTR) despite it reporting a per-share decline of $16.49 in Q1. Bernstein and Benchmark both set price targets of $600 per share or more. MSTR closed up 3.35% on Friday at $394.37 per share. Equity analysts from investment firms Benchmark and Bernstein reiterated their buy ratings and lofty price targets for Strategy (MSTR), a day after the company said that it had recorded a loss of $5.9 billion on its Bitcoin holdings in its first quarter of 2025. The analysts highlighted Strategy’s continued strategy to purchase more Bitcoin, which has become its core business…

Mike Felch// How to Purge Google and Start Over – Part 1 Brief Recap In part 1, we discussed a red team engagement that went south when the Google SOC joined forces with the SOC of a customer leading to the dismantling of all our compromised accounts, throw-away accounts, and even my work account. My daily work life was impacted significantly that week and my home internet-connected devices that had Google sessions were regularly reset. I learned that I should probably reconsider how my own personal life consolidated all facets with Google and how I could be impacted by the…

A supply chain attack involving 21 backdoored Magento extensions has compromised between 500 and 1,000 e-commerce stores, including one belonging to a $40 billion multinational. Sansec researchers who discovered the attack report that some extensions were backdoored as far back as 2019, but the malicious code was only activated in April 2025. “Multiple vendors were hacked in a coordinated supply chain attack, Sansec found 21 applications with the same backdoor,” explains Sansec. “Curiously, the malware was injected 6 years ago, but came to life this week as attackers took full control of ecommerce servers.” Sansec says the compromised extensions are…

Selecting the right VPN protocol for your iOS device can dramatically impact performance, security, and battery life. This guide examines the leading protocols available for iPhone users, weighing real-world performance against technical specifications to help you make an informed decision. What are the VPN protocols on iOS? iOS supports several VPN protocols, each with distinct advantages: WireGuard: Modern, lightweight protocol with exceptional speed IKEv2/IPsec: Natively supported by iOS with robust security L2TP/IPsec: Older but reliable native protocol OpenVPN: Versatile third-party solution with strong encryption Let’s examine how these protocols perform specifically on iOS devices. WireGuard: The speed champion WireGuard has…

CMMC mandates that companies working as part of the government supply line need to comply with a level of security determined by their handling of controlled information. Identifying the level of compliance necessary for your business is the first step in achieving that compliance. The second step is scoping. All About Scoping for CMMC What is scoping? Scoping is the process of analyzing your business from top to bottom, inside and out. With this process, you identify all of the systems, devices, channels, and people who have access to CUI and other covered data. You essentially draw a boundary. Anything…

Luxury retailer Harrods confirms a cyber attack attempt, restricting internet access but keeping its online store running. Learn about the growing wave of cyber threats also impacting M&S and Co-op. Following disruptions at British retail giants Marks & Spencer and Co-op, the esteemed department store Harrods also, reportedly, has been targeted by malicious threat actors attempting to infiltrate their online infrastructure. This incident, occurring just this week, prompted Harrods to implement protective measures, including restricting internet access across their physical locations. It’s worth noting that while Harrods confirmed the cyber attack attempt and the resulting restrictions on internet access at…