Author: HackWatchit
Chief Information Security Officers are facing rising pressure to ensure robust security and compliance across globally distributed environments. Managing multiple security tools and platforms while avoiding inconsistencies and gaps in coverage is an ever-growing challenge. Digital transformation and the shift to the cloud introduces even more areas of concern. With sensitive data distributed across multiple cloud providers, CISOs struggle to maintain visibility into these complex and ephemeral environments. As both the technology and threat landscapes continue to change, it’s all but impossible for CISOs to manage security and risk using traditional, manual approaches. Dynamic operational control assurance offers a way…
WestExec Advisors announced on Thursday that Laura Galante, former Director of the Cyber Threat Intelligence Integration Center and Intelligence Community Cyber Executive at the Office of the Director of National Intelligence, has been named a Principal of the firm. An expert in national security, cyber intelligence, and the intersection of technology and policy, she will work with clients navigating the most complex and critical security challenges in an increasingly interconnected and digital world. Galante is widely recognized for her pioneering work in cyber threat intelligence and cyber defense. During her tenure at the Office of the Director of National Intelligence,…
Researchers have uncovered three serious vulnerabilities in Rack, a server interface used by most Ruby web app frameworks (Ruby on Rails, Sinatra, Hanami, Roda, and others). Two of the flaws – CVE-2025-25184 and CVE-2025-27111 – could allow attackers to manipulate log content and entries, while the third one – CVE-2025-27610 – is a path traversal vulnerability that may allow attackers to gain unauthorized access to sensitive information. About CVE-2025-27610 Rack provides a standardized way for web servers and Ruby web applications to communicate, and is a core component of many web applications that are used by businesses and consumers. It…
Lauren Goode: I think Katie should go first. She’s the boss.Katie Drummond: So as you all know, because I can’t stop talking about it, I recently returned from France, and one thing in particular that I am now pathologically fixated on, that I am recommending to all of you, if you want to feel just so good, if you want to just feel so good when you sit down and eat, is French butter. And so I ate so much butter last week. My entire family was obsessed with the butter. All we did was eat butter. We got home…
Michael Allen // Every year around the holidays I end up having a conversation with at least one friend or family member about the importance of choosing unique passwords for each web site or service they use. Usually, it’s after they’ve received a phone or a camera or some other “smart” device for Christmas and have asked me to help them set it up. Most recently, it was when a friend told me his eBay account got hacked, and he asked me how he could keep it from happening again in the future. I told him that it was likely…
Mobile network opreator SK Telecom, which serves approximately 34 million subscribers in South Korea, has confirmed that it suffered a cyber attack earlier this month that saw malware infiltrate its internal systems, and access data related to customers’ SIM cards.The breach occurred at around 11pm local time, on the night of Saturday 19 April 2025, in what is believed to have been an attack intentionally timed to exploit a day and time when there may be less staff monitoring in place.Responsibly, SK Telecom informed the Korean Internet & Security Agency (KISA) the following day, and fulfilled its legal obligation to…
Blockchain infrastructure provider dRPC has announced the launch of a NodeHaus platform that enables chain foundations unprecedented control over their RPC infrastructure. It provides real-time RPC monitoring, delivering actionable insights to support data-driven infrastructure management. NodeHaus helps foundations understand how their infrastructure performs across regions, providers, and methods. It incorporates powerful tools for maintaining high availability and optimizing traffic distribution. Serving as a strategic data visualisation and control panel for RPC infrastructure, NodeHaus bridges the gap between technical performance and strategic decisions. This helps to make RPC infrastructure behaviour measurable and accountable, simplifying the task of managing ecosystem growth. The…
Dynamic hybrid data center cloud environments are growing, leading to a larger attack surface. The mix of on-premises and multiple cloud platforms creates complex interconnections that are hard to monitor. Traditional network segmentation is insufficient as workloads move fluidly between on-premises data centers and the cloud, leaving protection gaps. Without proper tools, security professionals lack full visibility, allowing lateral threats to go undetected and spread within the organization. Proactively Stopping Lateral Movement to Prevent Breaches Check Point Software Technologies Ltd and Illumio announced a strategic partnership to enable enterprises to prevent lateral movement and breaches through microsegmentation and proactive threat…
Aleph.im, a pioneer in decentralized infrastructure since 2019, today announces its rebrand to Aleph Cloud, reflecting its evolution into a full-stack decentralized cloud platform. The new brand unifies its broad suite of services including decentralized compute, storage, virtual machines, and GPU resources, under one brand built to meet the infrastructure demands of modern Web3 and AI applications. As centralized cloud failures like the recent AWS outage continue to disrupt major crypto exchanges and dApps, Aleph Cloud offers a timely alternative: permissionless, censorship-resistant infrastructure running on over 700 nodes in 12 countries. Its offering also includes a developer-friendly SaaS platform that…