Author: HackWatchit

Cyberattacks targeting the energy sector are increasing, driven by a host of geopolitical and technological factors. A report published by Sophos in July 2024, and which surveyed 275 cybersecurity and IT leaders from the energy, oil/gas, and utilities sector across 14 countries, found 67% of respondents who said their organizations had suffered a ransomware attack in the last year. While Sophos’ figure remained steady year-over-year, a January 2025 report authored by TrustWave said that ransomware attacks targeting the energy and utilities sectors increased by 80% in 2024 compared to the previous year. Most of these breaches have only managed to…

Frustrated by laggy audio and connection drops when trying to use Clubhouse in the UAE? It’s a common issue, often stemming from VoIP regulations and network throttling that can make the app unusable, even if it isn’t officially ‘blocked.’ There’s a straightforward fix. A high-quality Virtual Private Network (VPN) – widely considered the most effective solution – can bypass these restrictions. We’ll show you exactly how a VPN can restore smooth access and get you back into Clubhouse conversations from anywhere in the UAE. Let’s dive in. Why is Clubhouse restricted or throttled in the UAE? The core issue often…

A critical vulnerability in the Erlang/OTP SSH, tracked as CVE-2025-32433, has been disclosed that allows for unauthenticated remote code execution on vulnerable devices. The flaw was discovered by Fabian Bäumer, Marcus Brinkmann, Marcel Maehren, and Jörg Schwenk of the Ruhr University Bochum in Germany and given a maximum severity score of 10.0. All devices running the Erlang/OTP SSH daemon are impacted by the vulnerability and are advised to upgrade to versions 25.3.2.10 and 26.2.4 to fix the flaw. Erlang is a programming language known for its fault-tolerance and concurrency, making it commonly used in telecom infrastructure and high -availability systems. Erlang/OTP is a set of…

If your business is based in Australia and becomes the victim of a ransomware attack, there’s a crucial change in the law that you need to be aware of. Starting from May 30, 2025, if you decide to pay a ransom, you will be legally required to report the incident to the government within 72 hours. This new requirement is part of the Cyber Security Act, which mandates that all organizations must report ransomware attacks and any ransom payments made. The law was introduced by the Australian Signals Directorate through the Australian Cyber Security Centre (ACSC) and is designed to…

Following reports of unauthorized access to a legacy Oracle cloud environment, CISA warns of potential credential compromise leading to phishing, network breaches, and data theft. Find out CISA’s recommendations for organisations and individuals.   The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about potential security risks following reports of possible unauthorised access to an older Oracle cloud system. While the full extent of this issue is still being looked into, CISA is concerned about the safety of login information that might have been exposed. According to the agency, if attackers manage to obtain usernames, emails, passwords,…

CrowdStrike Falcon® Cloud Security now delivers real-time detections for AWS IAM Identity Center, helping organizations detect and respond to identity-driven cloud threats before they escalate. A few months ago, we released CrowdStrike Falcon® Identity Protection support for AWS IAM Identity Center to help organizations detect and stop identity-based attacks before they could reach the cloud control plane. Now, we’re expanding that protection by bringing select identity threat detections directly into Falcon Cloud Security. This gives customers the ability to stop cross-domain attacks earlier — without requiring an additional investment. Adversaries no longer operate in silos, and neither should defenders. Modern…

China-linked APT Mustang Panda upgrades tools in its arsenal Pierluigi Paganini April 17, 2025 China-linked APT group Mustang Panda deployed a new custom backdoor, MQsTTang, in recent attacks targeting Europe, Asia, and Australia. China-linked APT group Mustang Panda (aka Camaro Dragon, RedDelta or Bronze President). deployed a new custom backdoor, tracked as MQsTTang, in recent attacks targeting entities in Europe, Asia, and Australia. Mustang Panda has been active since at least 2012, targeting American and European entities such as government organizations, think tanks, NGOs, and even Catholic organizations at the Vatican. Past campaigns were focused on Asian countries, including Taiwan, Hong Kong, Mongolia, Tibet, and Myanmar. In the 2022…

Joff Thyer has dove into everything that is IPv6 and has so much to share about it. He gets really technical but in a way you’ll be able to understand. Google reports that over 30% of their systems access comes via the IPv6 protocol coming into 2020. Many Internet Service Providers have no remaining choice but to deploy IPv6 for simple lack of v4 address resources. The global Internet can already be thought of as balkanized into a split IPv4/IPv6 world based on historical v4 allocation. There will soon come a time whereby accessing IPv4 deployed resources will be considered…

Rutgers University’s Miller Center on Policing and Community Resilience and the University of Virginia’s (UVA) Center for Public Safety and Justice (CPSJ) are leading the largest-ever global law enforcement delegation to participate in the International March of the Living, commemorating Holocaust Remembrance Day (Yom HaShoah) and the 80th anniversary of the liberation of Auschwitz, according to a press release yesterday. On April 24, 2025, more than 60 leaders in law enforcement from across the United States, Europe, the United Kingdom, Africa, and members of the Global Consortium for Law Enforcement Training Executives (GCLETE) will join 80 Holocaust survivors, families of…