Author: HackWatchit

The U.S. House Select Committee on the Chinese Communist Party (CCP) issued subpoenas to three Chinese state-owned telecom companies – China Mobile, China Telecom, and China Unicom, after they did not respond to a formal bipartisan congressional request for information sent on March 4. These subpoenas require compliance by May 7, 2025, as part of an ongoing investigation into whether these companies are still operating in the country in ways that could affect national security and the privacy of Americans’ data. The Committee noted that “should the companies continue to withhold cooperation, the Committee is prepared to consider further steps…

The Cybersecurity and Infrastructure Security Agency (CISA), a key agency responsible for protecting the United States’ critical infrastructure, has taken a significant step by instructing its threat hunting team to cease using VirusTotal—a widely used cybersecurity tool—by April 20, 2025. The decision is a part of a broader shift in CISA’s approach to threat intelligence and reflects growing concerns over the involvement of third-party platforms backed by large corporations, including Google. Furthermore, CISA has also directed its personnel to stop using Censys, a tool designed for tracking network vulnerabilities and internet-wide scanning, as of earlier this year in March. Both…

SAP NetWeaver zero-day allegedly exploited by an initial access broker Pierluigi Paganini April 25, 2025 A zero-day in SAP NetWeaver is potentially being exploited, putting thousands of internet-facing applications at risk. Researchers warn that a zero-day vulnerability, tracked as CVE-2025-31324 (CVSS score of 10/10), in SAP NetWeaver is potentially being exploited. Thousands of internet-facing applications are potentially at risk. The flaw in SAP NetWeaver Visual Composer Metadata Uploader stems from a lack of proper authorization checks. This means that unauthenticated attackers, those without valid credentials, can exploit it to upload malicious executable files to the system. Once uploaded, these files can be…

Ray Felch // Disclaimer: Be sure to use a faraday bag or cage before transmitting any data so you don’t accidentally break any laws by illegally transmitting on regulated frequencies. Additionally, intercepting and decrypting someone else’s data is illegal, so be careful when researching your traffic. Preface: Recently, I introduced myself to the world of SDR (Software Defined Radio) and admittedly learned a great deal in the process. I discovered that not only could I emulate actual radio-frequency (RF) hardware components using various software applications such as SDR Sharp, GQRX, SIGINTOS, CubicSDR, RTL-SDR supported software, etc, I could also use…

Rubrik announced its upcoming solution, Identity Resilience, designed to secure the entire identity landscape alongside data. Identity Resilience aims to protect the most common entry points for attackers – human and non-human identities (NHIs) – to help organizations maintain operations with minimal downtime. Identity Resilience aims to address a blindspot in enterprise security. A critical piece of infrastructure utilized by a vast majority of organizations, identity remains a consistent target for hackers. When compromised, these identity systems grant attackers access to critical data and credentials, and their disruption can prevent cyber recovery. Rubrik’s solution is designed to secure this vulnerable…

The post What’s a CME gap and why does it get filled? appeared first on CryptoSlate.

Washington, D.C. — 25th April 2025 — FireTail, the leading AI & API security platform, has released its annual report, The State of AI & API Security 2025, revealing a critical blind spot in the way organizations are securing their AI investments. Despite record-breaking AI adoption, the report warns that most enterprises are overlooking the most exposed part of the AI stack: the API layer. “APIs are the foundation of AI applications, and attackers know it,” said Jeremy Snyder, Co-founder and CEO at FireTail. “If you don’t secure your APIs, you’re not securing your AI. It’s that simple.” The report…

Enterprises using Commvault Innovation Release are urged to patch immediately against CVE-2025-34028. This critical flaw allows attackers to run code remotely and gain full control. A severe security vulnerability has been discovered in the Commvault Command Center, a widely adopted solution for enterprise backup and data management. This flaw, tracked as CVE-2025-34028 and assigned a critical severity score of 9.0 out of 10, could allow remote attackers to execute any code they desire on vulnerable Commvault installations without needing to log in. The dangerous weakness was discovered and responsibly reported on April 7, 2025, by Sonny Macdonald, a researcher with…

Redefining Cybersecurity for the AI Era With the launch of ChatGPT, everything changed – overnight, AI became democratized. But while everyday users turned to AI for grocery lists and grammar checks, cybercriminals weaponized it to scale attacks like never before. Now, the cyber threat landscape is evolving at an unprecedented pace, as generative AI amplifies dark web-sourced data to create hyper-personalized spear-phishing campaigns. These attacks go beyond traditional social engineering, leveraging deepfake technology, stolen credentials, and behavioral profiling to manipulate targets with near-perfect precision—blurring the line between deception and reality. The result? Stakes have never been higher, especially for the…