Author: HackWatchit
We’re proud to announce that Check Point CloudGuard has been named a Silver Stevie Award winner in the Best Cloud Security Solution category at the 2025 American Business Awards! This prestigious recognition reflects CloudGuard’s impact in enabling secure, scalable, and automated protection across complex cloud environments. In a year when AI and hyperconnectivity are redefining the threat landscape, CloudGuard stood out for its powerful blend of threat prevention, posture management, and real-time visibility. The WAF Comparison Project evaluated leading WAFs and found that Check Point CloudGuard WAF has the highest security rate of that has us 99.368%, and lowest false…
the other day, I came across a library I’d never heard of before. It was called NumExpr. I was immediately interested because of some claims made about the library. In particular, it stated that for some complex numerical calculations, it was up to 15 times faster than NumPy. I was intrigued because, up until now, NumPy has remained unchallenged in its dominance in the numerical computation space in Python. In particular with Data Science, NumPy is a cornerstone for machine learning, exploratory data analysis and model training. Anything we can use to squeeze out every last bit of performance in…
Hitachi Vantara, a subsidiary of Japanese multinational conglomerate Hitachi, was forced to take servers offline over the weekend to contain an Akira ransomware attack. The company provides data storage, infrastructure systems, cloud management, and ransomware recovery services to government entities and some of the world’s biggest brands, including BMW, Telefónica, T-Mobile, and China Telecom. In a statement shared with BleepingComputer, Hitachi Vantara confirmed the ransomware attack, saying it hired external cybersecurity experts to investigate the incident’s impact and is now working on getting all affected systems online. “On April 26, 2025, Hitachi Vantara experienced a ransomware incident that has resulted…
A large-scale phishing campaign targets WordPress WooCommerce users Pierluigi Paganini April 28, 2025 A large-scale phishing campaign targets WordPress WooCommerce users with a fake security alert urging them to download a ‘critical patch’ hiding a backdoor. Patchstack researchers uncovered a large-scale phishing campaign targeting WordPress WooCommerce users with a fake security alert. Threat actors urge recipients to download a “critical patch” that hides a backdoor. The experts noted that this campaign resembled another one the team monitored in December 2023, which sent fake security alerts to WordPress users. The emails warned of a supposed ‘Remote Code Execution (RCE)’ vulnerability, CVE-2023-45124,…
Rockwell Automation announced on Monday its Security Monitoring and Response service, which is purpose-built to deliver continuous, real-time monitoring of operational technology (OT) environments. Security Monitoring and Response seamlessly integrates into existing architecture to help industrial organizations stay ahead of cyber threats and build resilient operations. Securing OT environments is getting more complex due to increasing industrial cybersecurity incidents, vulnerabilities and talent shortages. The recent State of Smart Manufacturing report found cybersecurity risks and a shortage of skilled workers were both among the top 5 external obstacles for critical manufacturing. “As cyber risk continues to increase, manufacturers need constant vigilance…
Today, we’re announcing a new organization at Cisco Security with a distinct mission. The team is called Foundation AI, and its mission is to create transformational AI technology for cybersecurity applications. The team has been hard at work for the past six months, since the acquisition of Robust Intelligence, on which it is based. In this post, we’ll describe the problem Foundation AI seeks to solve, guiding principles, and share some of the products it is releasing. The Problem: Cybersecurity Is Not Yet Utilizing Modern AI to Its True Potential Since ChatGPT broke out in late 2022, AI has had…
Darin Roberts // I recently had to install a new gold image as my Kali Linux testing virtual machine. Almost on every test I do, I clone the gold image and use the fresh install to start from. On this image I install as many of the scripts and tools as I can so when I clone it, I don’t have to do it again. One of these tools is EyeWitness. It was written by Chris Truncer and can be found at https://github.com/FortyNorthSecurity/EyeWitness. EyeWitness is a great tool that visits web servers from either a list or a .nessus file…
Toronto, Canada, April 28th, 2025, CyberNewsWire Dismissal affirms no-logs policy as a valid legal defense, avoiding a chilling effect on privacy infrastructure providers worldwide. Windscribe, a globally used privacy-first VPN service, announced today that its founder, Yegor Sak, has been fully acquitted by a court in Athens, Greece, following a two-year legal battle in which Sak was personally charged in connection with an alleged internet offence by an unknown user of the service. The case centred around a Windscribe-owned server in Finland that was allegedly used to breach a system in Greece. Greek authorities, in cooperation with INTERPOL, traced the…
ArmorCode launched Anya, an agentic AI champion purpose-built for AppSec and product security teams. Following a successful early access program, Anya is now available to all ArmorCode enterprise customers, delivering intelligent, conversation-driven security insights that close the expertise gap and accelerate critical security decisions. While security teams continue to struggle with tool sprawl and alert fatigue, Anya was built to transform how organizations manage application security. Unlike traditional AppSec dashboards and siloed tools, Anya functions as a context-aware, conversational teammate that interprets data cross-correlated from more than 285 integrations with security tools and sources spanning code, apps, cloud, and infrastructure…