Author: HackWatchit

Microsoft says that Word for Windows will soon enable autosave and automatically save all new documents to the cloud by default. The company is currently testing this new feature with the help of Microsoft 365 Insiders in the Beta Channel, who will get it after upgrading to Word for Windows Version 2509 (Build 19221.20000) or later, which was released on Monday. Microsoft will also roll out this functionality to Excel for Windows and PowerPoint for Windows users later this year. “We are modernizing the way files are created and stored in Word for Windows,” said Raul Munoz, a Product Manager on the Office Shared Services and Experiences team.…

0. You’re certainly already familiar with spherical or 360 images. They’re used in Google Street View or in virtual house tours to give you an immersive feeling by letting you look around in any direction. Since such images lie on the unit sphere, storing them in memory as flat images might be tricky. In practice, we usually store them as flat arrays using one of the two following formats: Cubemap (6 images): each image corresponds to the face of a cube onto which the unit sphere has been projected. Equirectangular image: similar to a planisphere map of the Earth. The…

A team of researchers from Frondeur Labs, DistributedApps.ai, and OWASP has developed a new machine learning framework designed to help defenders anticipate attacker behavior across the stages of the Cyber Kill Chain. The work explores how machine learning models can forecast adversary techniques and generate structured attack paths. Combining ATT&CK with the kill chain The Cyber Kill Chain, introduced by Lockheed Martin, breaks down attacks into seven stages: reconnaissance, weaponization, delivery, exploitation, installation, command and control, and actions on objectives. The MITRE ATT&CK framework, now widely used in the industry, catalogs real-world tactics and techniques used by adversaries. The researchers…

The financially motivated threat actor tracked as Storm-0501 has shifted focus on targeting cloud environments for data theft and extortion, Microsoft warns. Active since at least 2021, Storm-0501 is known for using various ransomware families in attacks against on-premise and hybrid cloud environments, including Sabbath, Alphv/BlackCat, Hive, Hunters International, LockBit, and Embargo. Last year, the hacking group was seen compromising Active Directory environments, moving to Entra ID, escalating privileges to global administrator, implanting backdoors in Entra ID tenant configurations, and deploying on-premises ransomware for file encryption. In a recent attack against a large enterprise, the threat actor used similar tactics:…

AIDEFEND (Artificial Intelligence Defense Framework) is an open knowledge base dedicated to AI security, providing defensive countermeasures and best practices to help security pros safeguard AI and machine learning systems. Practicality is at the core of AIDEFEND. The framework is designed to be “highly actionable,” with the goal of not only raising awareness of threats but also providing clear playbooks to defend against them. “Each technique and subtechnique is mapped to concrete threats cataloged in MITRE ATLAS, MAESTRO, and the OWASP Top 10 lists for LLMs and ML. Just as important, the project is open source, intentionally built as a…

Amazon researchers this month disrupted the latest campaign by Russian-linked threat group APT29 to steal Microsoft user credentials in what the cloud giant’s top security official said “illustrates APT29’s continued evolution in scaling their operations to cast a wider net in their intelligence collection efforts.”Amazon’s threat intelligence team detected what they said was an opportunistic watering hole campaign that aimed to trick users through compromised websites into authorizing devices controlled by the APT29 attackers via Microsoft’s device code authentication flow. The attackers used the compromised websites to redirect users to their malicious infrastructure.Threat researchers with Amazon had created an analytic…

The following is a guest post and analysis from Vincent Maliepaard, Marketing Director at Sentora.2025 has marked a turning point for XRP, combining explosive price gains with transformative shifts in its core narrative. In July, the token hit an all-time high of $3.58, propelled in part by decisive legal victories. Beyond price action, Ripple’s launch of the RLUSD stablecoin has gained significant traction, and the network is now doubling down on expanding XRP’s footprint in the DeFi ecosystem.The foundation of XRP’s breakout was laid when the SEC dropped its lawsuit against Ripple, removing a significant regulatory overhang that had suppressed…

Anthropic’s Claude Code large language model has been abused by threat actors who used it in data extortion campaigns and to develop ransomware packages. The company says that its tool has also been used in fraudulent North Korean IT worker schemes and to distribute lures for Contagious Interview campaigns, in Chinese APT campaigns, and by a Russian-speaking developer to create malware with advanced evasion capabilities. AI-created ransomware In another instance, tracked as ‘GTG-5004,’ a UK-based threat actor used Claude Code to develop and commercialize a ransomware-as-a-service (RaaS) operation. The AI utility helped create all the required tools for the RaaS platform,…

WhatsApp has patched a critical 0-day (CVE-2025-55177) that allowed zero-click spyware attacks on iOS and Mac users. The flaw was used to steal data. Update your app now to stay protected. WhatsApp has revealed it has patched a serious security vulnerability in its apps for Apple devices that was used to secretly compromise the iPhones and Macs of “specific targeted users.” The bug, identified as CVE-2025-55177, was discovered by WhatsApp’s internal security team. The company explained in its official advisory that the flaw was part of a sophisticated attack chain that linked two separate vulnerabilities. This is a zero-click attack…