Author: HackWatchit
As artificial intelligence becomes more deeply embedded in business operations, it’s also reshaping how cyber threats evolve. The same technologies helping organizations improve efficiency and automate decision-making are now being co-opted and weaponized by threat actors. The inaugural edition of the Check Point Research AI Security Report explores how cyber criminals are not only exploiting mainstream AI platforms, but also building and distributing tools specifically designed for malicious use. The findings highlight five growing threat categories that defenders must now account for when securing systems and users in an AI-driven world. Get the AI Security Report now AI Use and…
Ridge Security announced RidgeSphere, a centralized management platform designed to simplify the orchestration of multiple RidgeBot , the AI-powered automated security validation platform, across client environments. Built for Managed Security Service Providers (MSSPs) and large enterprises, RidgeSphere eliminates operational silos, accelerates service delivery, and unlocks new revenue opportunities through unified security validation. The challenge: Scaling offensive security As demand for proactive threat exposure management grows, MSSPs and enterprises face mounting complexity: Manual processes for deploying and tracking RidgeBot instances across clients or business units. Disjointed reporting that obscures cross-organization risk trends. License sprawl and inefficiencies that limit service scalability. RidgeSphere:…
The Co-operative Group has confirmed it shut down parts of its IT network after detecting an attempted cyberattack, in what is the latest incident to affect a major UK retailer. The move was described as precautionary and aimed at containing the threat before any systems could be compromised. Although the shutdown affected internal functions such as virtual desktops, stock systems, and contact centre operations, Co-op reassured the public that all food stores, home delivery services, and funeral operations are running as normal. “There is no evidence that customer data has been accessed,” the company said in a statement. “We took…
by Cameron Cartier and Dave Blandford This is a foolproof guide to intercepting traffic from mobile applications built on Flutter, which historically have been especially challenging to intercept. The methods presented should work for other types of applications as well. In the first half of this blog, we will discuss a method of intercepting iOS traffic via internet sharing on Mac. In the second half, we will show you how to intercept traffic from a rooted Android virtual device (AVD) using HTTP Toolkit. Need some help? You can check out Dave’s blog on ‘How to Root Android Phones’ here: https://www.blackhillsinfosec.com/how-to-root-android-phones/…
The Confidence Gap in SecOps Is Real, and It’s Time to Close It Over the past year I’ve spoken with hundreds of CISOs and SOC leaders and no matter the organization’s size or industry there is a recurring theme: Security teams aren’t struggling with a lack of data, they’re struggling with a lack of clarity. Alerts are easy, but actions are hard. Speed alone is no longer enough. What teams need now are smarter systems—solutions that reduce noise, validate threats, automatically investigate, and confidently guide response. At RSA Conference 2025, we’re unveiling our next set of AI-driven innovations built to…
The FBI is warning the public that cyber criminals are targeting users of employee self-service websites owned by companies and government services. The cyber criminals are using search engine advertisements to impersonate legitimate websites and steal victim information and funds. Cyber criminals use fraudulent search engine advertisements to direct users to malicious websites that mimic the legitimate sites in appearance, but steal login credentials and other financial information when the victim logs in. Previously, cyber criminals primarily targeted small business commercial bank accounts in account takeover schemes, but have expanded to target payroll, unemployment programs, and health savings accounts with the goal…
Trellix issued new research on Tuesday, identifying that the threat landscape has seen a notable intensification, with threat detection volume increasing by 45 percent from the fourth quarter of last year to the first quarter of this year. The CyberThreat report identified that a surge in activity was accompanied by more sophisticated and targeted attacks, a wider range of active campaigns, and shifts in the geographical focus of these threats, highlighting the growing complexity and breadth of cyber threats faced by organizations worldwide. In its ‘The CyberThreat Report: April 2025,’ Trellix revealed that the telecommunications sector has been particularly affected,…
AirBorne flaws can lead to fully hijack Apple devices Pierluigi Paganini April 30, 2025 Vulnerabilities in Apple’s AirPlay protocol and SDK exposed Apple and third-party devices to attacks, including remote code execution. Oligo Security found serious flaws, collectively tracked as AirBorne, in Apple’s AirPlay protocol and SDK, affecting Apple and third-party devices. Attackers can exploit the vulnerabilities to perform zero-/one-click RCE, bypass ACLs, read local files, steal data, and execute MITM or DoS attacks. These flaws can be chained to fully hijack devices over wireless or peer-to-peer connections. The AirBorne vulnerabilities don’t affect all Apple devices, but with 2.35 billion…
“fear of missing out” (FOMO) when it comes to LLM agents? Well, that was the case for me for quite a while. In recent months, it feels like my online feeds have been completely bombarded by “LLM Agents”: every other technical blog is trying to show me “how to build an agent in 5 minutes”. Every other piece of tech news is highlighting yet another shiny startup building LLM agent-based products, or a big tech releasing some new agent-building libraries or fancy-named agent protocols (seen enough MCP or Agent2Agent?). It seems that suddenly, LLM agents are everywhere. All those flashy…