Author: HackWatchit

going to the doctor with a baffling set of symptoms. Getting the right diagnosis quickly is crucial, but sometimes even experienced physicians face challenges piecing together the puzzle. Sometimes it might not be something serious at all; others a deep investigation might be required. No wonder AI systems are making progress here, as we have already seen them assisting increasingly more and more on tasks that require thinking over documented patterns. But Google just seems to have taken a very strong leap in the direction of making “AI doctors” actually happen. AI’s “intromission” into medicine isn’t entirely new; algorithms (including…

By Gary Miliefsky, Publisher, Cyber Defense Magazine Good news comes to us like a Windows patch Tuesday: Common Vulnerabilities and Exposures Program will continue operating with an eleven month continuation of its federal contract, according to CISA. It might, however, transition, over time, to the newly launched CVE Foundation, found online at https://www.thecvefoundation.org/, which states: “Since its inception, the CVE Program has operated as a U.S. government-funded initiative, with oversight and management provided under contract. While this structure has supported the program’s growth, it has also raised longstanding concerns among members of the CVE Board about the sustainability and neutrality…

By Gary S. Miliefsky, Publisher, Cyber Defense Magazine Transforming Exposure Management with Safe, Automated Remediation Organizations today invest heavily in security tools, often spending $100k or more annually. But the true cost extends beyond finances—it’s in the time, complexity, and operational burden of properly deploying, configuring, and maintaining these tools across sprawling infrastructures. With the average company running between 16 and 45+ security tools, many environments suffer from misconfigurations, alert fatigue, and uncoordinated responses that leave them vulnerable to risk and operational disruption. According to Gartner, more than 60% of security incidents by 2029 will trace back to misconfigured controls.…

How Edge & Node’s Rodrigo Coelho Is Reimagining the Web with The Graph Rodrigo Coelho is no stranger to building from scratch. From co-founding startups in the ’90s to now leading Edge & Node—the core team behind The Graph—his path reflects a blend of entrepreneurship, technological foresight, and a deep-rooted belief in the decentralized future of the web. In this HackerNoon “Behind the Startup” interview, Rodrigo sits down with Ishan Pandey to reflect on his journey, The Graph’s evolution, and how he envisions a future where Web3 is not just real—but inevitable. Ishan Pandey: Hi Rodrigo, it’s a pleasure to…

by Source Defense When attackers are clever enough to name their cookie “csp_f_y,” you know they’re not just exfiltrating data—they’re mocking your defenses. In a recent attack spotted by the Source Defense Cyber Research team, a compromised first-party script on a payment page stored sensitive data in a cookie named csp_f_y. The exfiltration didn’t happen immediately—it was triggered on the next page load using location.href, slipping past content security policies (CSP) that would have otherwise blocked malicious outbound requests. Let that sink in. The attacker: Used a first-party script—trusted by the site. Delayed the exfiltration, waiting for a benign “thank…

Researchers from Trend Micro revealed this week that a controller linked to the BPFDoor backdoor can open a reverse shell, enabling attackers to burrow deeper into compromised networks. BPFDoor is known for its stealthy defense evasion techniques and has been used in recent cyberespionage campaigns targeting telecommunications, finance, and retail sectors. Attacks have been observed across South Korea, Hong Kong, Myanmar, Malaysia, and Egypt. During their investigation, the team uncovered a previously unseen controller, which they attribute to Red Menshen, an advanced persistent threat (APT) group tracked by Trend Micro as Earth Bluecrow. BPFDoor is a state-sponsored backdoor designed for…

As enterprises accelerate their shift toward secure access service edge (SASE), many are tempted to implement cloud-only security service edge (SSE) solutions. And while SSE provides modular security services like SWG, CASB, and ZTNA, it also introduces hidden costs, scalability challenges, and architectural trade-offs that impact enterprise network performance and budget. A hybrid approach, combining on-premises SD-WAN with cloud-based SSE, is the key to an efficient, scalable, and cost-effective SASE implementation. Let’s take a deeper look into why that is. Join us on 23rd April to learn 4 Ways to SASE with a Hybrid Mesh Firewall Platform. The Cloud Egress…

So much information about testing webapps for security problems is old. Don’t get me wrong, the old stuff still works way more often than we’d like, but there’s more to webapp vulnerabilities than cross-site scripting and SQL injection. Take JWTs – JSON Web Tokens – for example. These are base64 encoded tokens that sometimes get written to your browser’s localStorage or sessionStorage and passed around in cookies or HTTP headers. They’re pretty common in authentication and authorization logic for web APIs. Because they’re encoded, they look like gibberish and it’s easy to skip over them during a test. For the…

CVE-2025-24054, a Windows NTLM hash disclosure vulnerability that Microsoft has issued patches for last month, has been leveraged by threat actors in campaigns targeting government and private institutions in Poland and Romania. “Active exploitation in the wild has been observed since March 19, 2025, potentially allowing attackers to leak NTLM hashes or user passwords and compromise systems,” Check Point researchers have shared. About CVE-2025-24054 CVE-2025-24054 allows attackers to capture the NTLMv2 response (i.e., the NTLMv2-SSP hash) sent by the victims’ machine to an attacker-operated SMB server that initiated an authentication request. Attackers can attempt to attempt to brute-force this captured…