Author: HackWatchit

for sustainability weakens, the need for long-term sustainable practices has never been more critical. How can we use analytics, boosted by agentic AI, to support companies in their green transformation? For years, the focus of my blog was always on using Supply Chain Analytics methodologies and tools to solve specific problems. Four Types of Supply Chain Analytics – (Image by Samir Saci) At LogiGreen, the startup I founded, we deploy these analytics solutions to help retailers, manufacturers, and logistics companies meet their sustainability targets. In this article, I will demonstrate how we can supercharge these existing solutions with AI agents.…

The U.K. government has published its official response to the 2024 consultation on the Smart Secure Electricity Systems (SSES) Programme, addressing proposals on energy smart appliances, licensing, and tariff data interoperability aimed at enabling consumer-led flexibility. The document adopts consumer-led flexibility (CLF) by building the right set of technical standards and requirements, ensuring robust cybersecurity protections, and giving consumers the confidence to jump into the smart market. Furthermore, through the licence, organizations will be required to have the necessary cybersecurity, financial, and management arrangements in place, and take account of grid stability considerations. Later this year, the government will launch…

Threat actors are intensifying internet-wide scanning for Git configuration files that can reveal sensitive secrets and authentication tokens used to compromise cloud services and source code repositories. In a new report from threat monitoring firm GreyNoise, researchers have recorded a massive spike in searches for exposed Git configs between April 20-21, 2025. “GreyNoise observed nearly 4,800 unique IP addresses daily from April 20-21, marking a substantial increase compared to typical levels,” explained GreyNoise in the report. “Although activity was globally distributed, Singapore ranked as both the top source and destination for sessions during this period, followed by the U.S. and…

At RSAC 2023, Cisco unveiled its new solution, Cisco XDR, with the promise of transforming the way that Security Teams operate. Two years later, Cisco has executed that promise for over 1000 customers, providing defined and prioritized incidents with guided responses, and reducing mean time to respond. Now at RSAC 2025, Cisco is democratizing Security Operations further, evolving the jobs of cyber-defenders once more in the world of AI. Instant Attack Verification Designed to take Incidents in Cisco XDR to the next level, Instant Attack Verification continues to focus on ensuring organizations can quickly understand what is happening in their…

Jordan Drysdale // tl;dr BHIS made some interesting discoveries while working with a customer to audit their Amazon Web Services (AWS) infrastructure. At the time of the discovery, we found two paths to ingress the customer’s virtual private cloud (VPC) through the elastic map reduce (EMR) application stacks. One of the vulns that gained us internal access was the Hadoop Unauthenticated RCE, which was patched by Apache a while back now. Another, and a bit more interesting entry point, was the HUE interface, which, by default, allows the creation of a new admin user for the web interface. Once in…

The Cybersecurity and Infrastructure Security Agency (CISA) has added three new flaws to its Known Exploited Vulnerabilities catalog on Monday, affecting Commvault (CVE-2025-3928), Active! Mail (CVE-2025-42599), and Broadcom Brocade (CVE-2025-1976) solutions. CISA’s KEV catalog is constantly updated and provides IT admins in US federal civilian agencies with instructions on how to remediate these threats and by which date (as mandated by the Binding Operational Directive 22-01), but this living document can also come in handy to other organizations around the world. Vulnerabilities exploited as zero-days CVE-2025-3928 is an unspecified vulnerability that affected the web server module in all Commvault CommServe,…

How Sogni and Salad Plan to Decentralize AI Processing Power As generative AI models become more complex and demanding, the question of how to power them efficiently and affordably becomes increasingly urgent. Sogni AI, a decentralized platform for creative AI tools, has announced a strategic partnership with Salad Technologies, a distributed GPU provider. The collaboration opens a new front in the race to build accessible, decentralized AI infrastructure. The partnership allows GPU owners and renters to contribute to Sogni’s “Supernet,” a decentralized computing network currently in testnet. By integrating with Salad’s infrastructure, Sogni can now tap into more than 60,000…

San Francisco, United States, April 29th, 2025, CyberNewsWire By fusing agentic AI and contextual threat intelligence, SecAI transforms investigation from a bottleneck into a force multiplier. SecAI, an AI-enriched threat intelligence company, made its official debut today at RSA Conference 2025 in San Francisco, marking the company’s first public appearance on the global cybersecurity stage. At the event, the SecAI team is showcasing the latest version of its platform to security professionals from around the world. The updated SecAI Investigator platform is purpose-built to solve one of cybersecurity’s most stubborn challenges: efficient threat investigation. It tackles this by combining two…

Prioritize what matters. Secure what counts. We’re excited to announce a powerful new integration between Mend.io and Microsoft Defender for Cloud (MDC)—a step forward in our mission to bring intelligent, actionable, and context-rich open source security directly into the cloud security workflow. As organizations embrace cloud-native architectures, security teams face the growing challenge of identifying and prioritizing the open source software risks that truly matter. Our new integration meets that challenge head-on—by embedding Mend.io’s advanced Software Composition Analysis (SCA) and reachability analysis directly within Microsoft’s CNAPP platform. What’s new? This integration enables Defender for Cloud users to: See Mend.io SCA…