Author: HackWatchit

via the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘de Sitter’ appeared first on Security Boulevard.

The launch of ChatGPT undeniably marked a turning point in the technological landscape, ushering in the era of readily accessible and powerful Large Language Models (LLMs). This new age has ignited widespread enthusiasm among individuals and organizations alike, who are eager to harness generative AI to revolutionize their daily routines and operations. This is particularly evident in the cybersecurity domain, where the adoption of AI is seen as crucial for gaining an advantage in the ongoing battle against cyber adversaries. However, this technological advancement has also spurred a parallel evolution in cyber threats, with malicious actors becoming increasingly sophisticated in…

Businesses are losing out on an average of $98.5 million a year as a consequence of cyber threats, fraud, regulatory hurdles and operational inefficiencies, according to research from FIS and Oxford Economics. The cost of disharmony is highest among technology companies, followed by insurance, financial services and fintech respondents. The study revealed nine sources of disharmony, defined as disruptions and inefficiencies across the money lifecycle, with the most significant ones including: 88% of respondents identified cyberthreats 79% identified fraud 65% identified regulatory complexities Other tensions identified were operational inefficiencies, payment friction, human errors, illiquidity, financial technology skills gaps, and reputational…

As organizations gear up for 2025, third-party risk management (TPRM) remains a top priority. The need to manage risks associated with vendors and partners has grown more urgent, driven by new regulations, geopolitical tensions, and supply chain vulnerabilities. In today’s interconnected business environment, a partner’s weak security posture can quickly become your organization’s liability. Here are seven predictions for how TPRM will evolve to address these changing risks in 2025. AI Will Drive Predictive Insights and Streamline Processes Artificial intelligence (AI) is becoming a cornerstone of TPRM, enabling organizations to automate risk assessments, identify patterns in large datasets, and spot…

Frenos, a company specializing in autonomous OT security assessment platforms, has alerted OT (operational technology) security professionals to a major new vulnerability discovered in 2025. Designated CVE-2025-32433, the flaw affects the SSH implementation in Erlang/OTP and has been assigned a maximum severity rating of 10.0 on the CVSS scale. The severity of this vulnerability stems from its ability to allow unauthorized code execution without requiring authentication, representing a fundamental security breach, as no credentials are needed, and no complex exploitation techniques are required for an attacker to execute arbitrary code on affected systems. According to Cisco data, approximately two million…

New sophisticate malware SuperCard X targets Androids via NFC relay attacks Pierluigi Paganini April 21, 2025 ‘SuperCard X’ – a new MaaS – targets Androids via NFC relay attacks, enabling fraudulent POS and ATM transactions with stolen card data. Cleafy researchers discovered a new malware-as-a-service (MaaS) called SuperCard X targeting Android devices with NFC relay attacks for fraudulent cash-outs. Attackers promote the MaaS through Telegram channels, analysis shows SuperCard X builds had Telegram links removed, likely to hide affiliate ties and hinder attribution, suggesting efforts to evade detection. Analysis of the SuperCard X campaign in Italy revealed custom malware builds…

In 2024, financial institutions around the globe suffered an average loss of $6.08 million due to ransomware attacks. This marked a 10% increase compared to the previous year, signaling a disturbing trend of rising cybercrime targeting the financial sector. The analysis, conducted by security experts from Hunt.io, uncovered not only the staggering financial damage but also a new and alarming shift in cybercriminal tactics—one that has continued into 2025. The Evolving Tactics: Double Extortion and DDoS Attacks According to Hunt.io findings, ransomware operators are no longer just encrypting data and demanding ransom. A dangerous new trend is emerging: the use…

Hello and welcome! My name is John Strand. In this video, we’re going to be talking about using SpiderTrap to entrap and ensnare any web application pentesters or hackers that are trying to come into your web applications. Now, for this particular video, we’re going to be using the Active Defense Harbinger Distribution, or ADHD, which can be found at activecountermeasures.com, go forward slash into projects and you’ll be able to download the same distribution that I’m using here. This is also the same distribution that we use in our Wild West Hackin’ Fest classes. You can look at that…

Phishing attacks are one of the primary intrusion points for cyber criminals. As we examine the phishing threat landscape through the first quarter of 2025, cyber criminals continue to leverage trusted names to deceive unsuspecting users. Here’s a closer look at the trends, top brands targeted, and most notable incidents we’ve observed thus far in 2025. Key Highlights Microsoft remains the most targeted brand in phishing attacks, accounting for a 36% of all brand phishing incidents in Q1 2025. Google has surged to second place with 12% of phishing attempts, while Apple takes third with 8%. Mastercard makes a notable…