Author: HackWatchit

U.S. CISA adds SonicWall SMA100 Appliance flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 17, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SMA100 Appliance flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a SonicWall SMA100 Appliance flaw, tracked as CVE-2021-20035, to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is an OS Command Injection Vulnerability in the SMA100 management interface. A remote authenticated attacker can exploit the flaw to inject arbitrary commands as a ‘nobody’ user, which could potentially lead to arbitrary code execution. “Improper neutralization of special…

DISCLAIMER: This is not financial advice. I’m a PhD in Aerospace Engineering with a strong focus on Machine Learning: I’m not a financial advisor. This article is intended solely to demonstrate the power of Physics-Informed Neural Networks (PINNs) in a financial context. , I fell in love with Physics. The reason was simple yet powerful: I thought Physics was fair. It never happened that I got an exercise wrong because the speed of light changed overnight, or because suddenly ex could be negative. Every time I read a physics paper and thought, “This doesn’t make sense,” it turned out I…

Bitcoin miners may be struggling as the price of the biggest cryptocurrency by market value trades sideways, and investors sell off their equity—but stablecoin giant Tether is betting big on one of the sector’s largest players, purchasing about $32 million in equity in publicly traded Bitdeer in April.An SEC filing shows Tether snapped up the shares as the price of Bitdeer’s stock dropped. Tether did not immediately respond to Decrypt’s questions, but the company has increased its interest in the Bitcoin mining space: The company bought a stake in Bitdeer last year, and in March, filings showed that it had…

The industry is evolving yet again. With the CA/Browser Forum’s recent decision to reduce the maximum SSL/TLS certificate lifecycle to 47 days by 2029, the way organizations manage their certificates is going to change significantly—and sooner than most realize. This update builds on the trend of strengthening web security by minimizing risks associated with stale or compromised certificates. It’s no surprise that this shift has sparked questions from our existing customers, such as: “As we are using Imperva SSL, which has an expiry of 6 months. We did however give the delegation to Imperva for auto-renewal. Will the new changes…

Discord is facing a new lawsuit from the state of New Jersey, which claims that the chat app is engaged in “deceptive and unconscionable business practices” that put its younger users in danger.The lawsuit, filed on Thursday, comes after a multiyear investigation by the New Jersey Office of Attorney General. The AG’s office claims it has uncovered evidence that, despite Discord’s policies to protect children and teens, the popular messaging app is putting youth “at risk.”“We’re the first state in the country to sue Discord,” Attorney General Matthew Platkin tells WIRED.Platkin says there were two catalysts for the investigation. One…

Exposure management company Tenable announced on Wednesday that its Board of Directors has unanimously appointed Steve Vintz and Mark Thurmond as co-Chief Executive Officers on a permanent basis.  Following an extensive search process that considered both internal and external candidates, the Board concluded that Vintz and Thurmond are best positioned to move the company forward. The decision reflects the Board’s confidence in the strength of their leadership following a successful interim period during which they drove significant operational and strategic momentum.  The Board also intends to appoint Vintz and Thurmond to the Board immediately following the company’s annual shareholder meeting…

As enterprises accelerate their shift toward secure access service edge (SASE), many are tempted to implement cloud-only security service edge (SSE) solutions. And while SSE provides modular security services like SWG, CASB, and ZTNA, it also introduces hidden costs, scalability challenges, and architectural trade-offs that impact enterprise network performance and budget. A hybrid approach, combining on-premises SD-WAN with cloud-based SSE, is the key to an efficient, scalable, and cost-effective SASE implementation. Let’s take a deeper look into why that is. Join us on 23rd April to learn 4 Ways to SASE with a Hybrid Mesh Firewall Platform. The Cloud Egress…

In this Black Hills Information Security webcast John breakdowns why he hates threat intelligence… Again… But, he breaks down some of the cool new projects that are focusing on durable threat intelligence. This is key because many intel feeds are nothing more than domains, hashes, and IP addresses. However, with durable threat intel, we see attack techniques that are highly effective, yet are not as easy to block. For example, application allow listing abuse, connection profiles (RITA!), PowerShell encoding are all examples of detects you can use that are not specific to a point in time attack methodology. John also…

Cyberattacks targeting the energy sector are increasing, driven by a host of geopolitical and technological factors. A report published by Sophos in July 2024, and which surveyed 275 cybersecurity and IT leaders from the energy, oil/gas, and utilities sector across 14 countries, found 67% of respondents who said their organizations had suffered a ransomware attack in the last year. While Sophos’ figure remained steady year-over-year, a January 2025 report authored by TrustWave said that ransomware attacks targeting the energy and utilities sectors increased by 80% in 2024 compared to the previous year. Most of these breaches have only managed to…