Author: HackWatchit

As businesses and individuals increasingly rely on cloud services for storage, collaboration, and computing power, the importance of securing cloud environments has never been more critical. Cloud computing offers numerous advantages, including scalability, accessibility, and cost-efficiency. However, with these benefits come significant security risks, such as data breaches, unauthorized access, and potential cyberattacks. To safeguard sensitive information and ensure secure operations, it’s essential to follow best practices in cloud security. Whether you’re a business leader, an IT professional, or an individual user, understanding and implementing these essential cloud security practices can significantly reduce the risks associated with cloud computing. 1.…

PoC rootkit Curing evades traditional Linux detection systems Pierluigi Paganini April 28, 2025 Researchers created a PoC rootkit called Curing that uses Linux’s io_uring feature to evade traditional system call monitoring. Armo researchers have demonstrated a proof-of-concept (PoC) rootkit named Curing that relies on Linux asynchronous I/O mechanism io_uring to bypass traditional system call monitoring. “Curing is a POC of a rootkit that uses io_uring to perform different tasks without using any syscalls, making it invisible to security tools which are only monitoring syscalls. The project was found effective against many of the most popular security tools such as Linux EDRs solutions and container security.…

The pace and prevalence of adversarial AI is only accelerating — and organizations must harness the power of AI to stop them. CrowdStrike is building the tools they need to do it. Our latest innovations include Charlotte AI Agentic Workflows, Charlotte AI Agentic Response, and CrowdStrike Falcon® Complete Next-Gen MDR now using CrowdStrike® Charlotte AI™. We are also announcing platform-level AI advancements that prioritize risk and aid in response. For example, Charlotte AI Detection Triage now autonomously triages identity-based attacks. As adversaries weaponize AI to drive speed and scale, security teams need more than copilots and static playbooks. They need…

CVE-2025-31324, a critical vulnerability in the SAP NetWeaver platform, is being actively exploited by attackers to upload malicious webshells to enable unauthorized file uploads and code execution. The vulnerability was initially leveraged in zero-day attacks spotted by ReliaQuest researchers, who reported them to SAP. The software company confirmed that the attackers have been leveraging a new vulnerability; released an emergency patch on April 24; and urged organizations to upgrade to implement it and check whether their installations have been compromised. About CVE-2025-31324 SAP NetWeaver is a platform that provides the foundation for many of SAP’s business applications. CVE-2025-31324 is present…

OPSWAT announced that its MetaDefender Unidirectional Gateway has achieved international security standard Common Criteria EAL4+ certification. The recognition validates the advanced security capabilities of unidirectional security gateway for a range of critical use cases.  MetaDefender Unidirectional Security Gateway is designed to provide access to real-time OT (operational technology) data and enables secure unidirectional data transfer from the OT environment to IT without compromising the security and integrity of critical production systems. It’s hardware-enforced one-way data transfer capability ensures the integrity of sensitive information while protecting systems from external cyber threats.  “As OT and IT continue to converge with Industry 4.0,…

Allurity announces its acquisition of Croatian cybersecurity company Infigo IS. With deep technical expertise and one of southern Europe’s strongest offensive security teams, Infigo brings strengths that accelerate Allurity’s journey to become the preferred cybersecurity partner in Europe. Founded in 2005, Infigo has become one of the most respected cybersecurity companies in southern Europe, employing around 100 professionals. With a clear B2B focus from the start, Infigo supports clients across finance, high-tech manufacturing, critical infrastructure, and national security- delivering cybersecurity where resilience matters most. Some of the customers include work with multinational banks, payment platforms, space agencies and operators of…

Melissa Bruno // So you have an Internet-facing DNS server. Maybe you decided to set one up at home for fun, or your company has one that works with other services. Either way, you probably have a group of people in mind who should be using it. But are you sure that they’re the only ones who would be interested in it? You may have heard about the dangers of open mail relay servers: attackers can use improperly configured SMTP servers to send spam or phishing email to victims, so it’s the responsibility of the people running them to make…

The following is a guest post and opinion of Vitaliy Shtyrkin, Chief Product Officer at B2BINPAY.Nowadays, businesses face a dilemma: while cryptocurrencies have several benefits, including lower fees, faster transactions, and global accessibility, they also pose such risks as uncontrolled volatility and security concerns — both of which remain critical for consumers. This is confirmed by the research published in the middle of 2022, which shows that 50.6% of online shoppers view cryptocurrency as the future of payments, while the latest survey of 4000 people in the United States demonstrates that less than 1% identify crypto as their preferred online…

Blue Shield of California has confirmed a data breach affecting 4.7 million members due to a misconfigured Google Analytics setup. The exposure occurred from April 2021 to January 2024, where sensitive health information was inadvertently shared with Google’s advertising platforms. The breach was reported to the U.S. Department of Health and Human Services, which added it to their breach portal. Image courtesy of Bleeping Computer Details of the Breach The data leak included various types of sensitive information, such as: Insurance plan name and type Member gender and family size City and ZIP code Medical claim service dates and associated…