Author: HackWatchit

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Apple plugs zero-day holes used in targeted iPhone attacks (CVE-2025-31200, CVE-2025-31201)Apple has released emergency security updates for iOS/iPadOS, macOS, tvOS and visionOS that fix two zero-day vulnerabilities (CVE-2025-31200, CVE-2025-31201) that have been exploited “in an extremely sophisticated attack against specific targeted individuals on iOS.” When companies merge, so do their cyber threatsFor CISOs, mergers and acquisitions (M&A) bring both potential and risk. These deals can drive growth, but they also open the door to serious cybersecurity threats that may derail the transaction. Windows NTLM vulnerability…

In brief According to a new study, high-intensity exercise performed close to bedtime can significantly disrupt sleep quality and slow overnight recovery. The study analyzed data from nearly 15,000 physically active adults over a year and measured the impact of various levels of workouts close to bedtime. Researchers recommend completing high-intensity exercise at least four hours before sleep onset to optimize sleep quality. Night owls who hit the gym hard might be losing more than just sweat—your sleep could be taking a hit, too, according to a new international study.Researchers from the United States, Australia, and Switzerland found that high-intensity…

Why is Value-Driven Secrets Management Essential in Today’s Cybersecurity Landscape? Where the importance of data has skyrocketed, making its protection paramount. This has brought the concept of Non-Human Identities (NHIs) and Secrets Management into the limelight. But how has the value-driven approach reshaped secrets management, and why is it vital? Unravelling the Concept of NHIs and Secrets NHIs are machine identities created by merging a “Secret” (an encrypted identifier) and the permissions awarded by a destination server. Secrets can be anything like a password, token, or key, providing a unique identifier similar to a passport. Managing NHIs and their secrets…

This is a joint webcast from Black Hills Information Security and Active Countermeasures. How many of us have tried some new configuration option, utility, or hardware on a production environment, only to crash a critical piece of the business? (me raising hand…) It’s amazing how quickly we learn not to do that! Now we have to decide – do we stop trying out new things because we’re scared of causing problems, or do we come up with a safe way to play and learn? We’re going to cover how to set up a Home Lab – an isolated environment where…

As the industrial cybersecurity landscape adopts AI and ML technologies, helping enhance anomaly detection across OT (operational technology) and ICS (industrial control systems) environments, they also improve capability visibility and response throughout the organizational systems lifecycle. Applying AI (artificial intelligence) in OT environments presents unique challenges, as the data preconditions are different. Relatively low complexity OT systems tend to yield noisy, unstructured, or incomplete data, necessitating specialized domain-knowledge filtering and extensive preprocessing. Unlike traditional signature-based detection methods, which have difficulty keeping up with new threats, AI/ML systems can evaluate massive datasets and recognize unusual behavioral patterns indicative of potential threats…

The global security and academic communities are mourning the loss of Candyce Kelshall, a widely respected terrorism and security expert whose decades-long career helped shape understanding and policy around violent extremism, intelligence studies, and the recruitment of minors by terrorist organizations, who died on April 10, 2025. Kelshall was President of CASIS Vancouver, Editor-in-Chief of the Journal of Intelligence, Conflict and Warfare, and an Adjunct Professor at the Centre for Security and Intelligence Studies at the University of Buckingham. She also held multiple teaching roles, including positions at Simon Fraser University, the Justice Institute of British Columbia, and the University…

What is the most valuable asset a company has? It’s not just its intellectual property, brand recognition, or even its technology – it is its customers. And in today’s digital-first world, how do companies connect with their customers? Through mobile applications. Think about it: How do you conduct banking transactions without an app? How do you get news without an app? How do you stream movies without an app? Mobile apps are the gateway between businesses and consumers, shaping how they interact, engage and ultimately decide whether to stay loyal or move on. The recent downfall of Sonos’s CEO over…

A new malware-as-a-service (MaaS) platform named ‘SuperCard X’ has emerged, targeting Android devices via NFC relay attacks that enable point-of-sale and ATM transactions using compromised payment card data. SuperCard X is linked to Chinese-speaking threat actors and shows code similarities with the open-source project NFCGate and its malicious spawn, NGate, which has facilitated attacks in Europe since last year. The malware-as-a-service platform is promoted through Telegram channels that also offer direct support to “customers.” SuperCard X was discovered by mobile security firm Cleafy, which reports seeing attacks utilizing this Android malware in Italy. These attacks involved multiple samples with subtle differences,…

Midnight Blizzard (APT29/Cozy Bear) targets European embassies and Ministries of Foreign Affairs with sophisticated phishing emails disguised as wine tasting invitations. Learn about the new GrapeLoader malware and the updated WineLoader backdoor deployed in this campaign. The notorious group of Russian government-backed hackers from the Midnight Blizzard, APT29, or Cozy Bear, have been attempting to infiltrate European diplomats’ computer systems since January, sending out fake emails to embassies and diplomatic organisations across Europe. Researchers at Check Point Research (CPR), who have been tracking this activity, discovered that hackers are using a new malware called ‘GrapeLoader’ to gain entry, followed by…