Author: HackWatchit

In an eleventh-hour scramble before a key contract was set to expire on Tuesday night, the United States Cybersecurity and Infrastructure Security Agency renewed its funding for the longtime software-vulnerability-tracking project known as the Common Vulnerabilities and Exposures Program. Managed by the nonprofit research-and-development group MITRE, the CVE Program is a linchpin of global cybersecurity—providing critical data and services for digital defense and research.The CVE Program is governed by a board that sets an agenda and priorities for MITRE to carry out using CISA’s funding. A CISA spokesperson said on Wednesday that the contract with MITRE is being extended for…

Cyber Threats Against Energy Sector Surge as Global Tensions Mount Pierluigi Paganini April 16, 2025 Resecurity warns of rising cyberattacks on the energy sector, some linked to large-scale campaigns targeting national infrastructure for geopolitical aims. Resecurity warns about the increase in targeted cyberattacks against enterprises in the energy sector worldwide. Some of these attacks represent much larger campaigns designed to target country-level infrastructure, acting as tools for geopolitical influence. It is expected that nation-state actors and foreign intelligence will leverage this approach as a new generation of warfare in the future, where the role of cybercriminal actors may be significant, enabling…

These days Large Language Models (LLMs) are nothing short of revolutionary, though they have been around since 1996 (ELIZA, developed by Joseph Weizenbaum, simulating a psychotherapist in conversation). It always astounds people how these neural network-powered marvels can understand and generate human language with astonishing fluency, opening doors to incredible possibilities. But this power comes at a price. I believe we’re facing a critical juncture: unless we address the security risks head-on, the potential of LLMs could be overshadowed by their vulnerabilities. Let’s start with understanding how do most LLMs respond to user prompts, that we see in daily life:…

In models, the independent variables must be not or only slightly dependent on each other, i.e. that they are not correlated. However, if such a dependency exists, this is referred to as Multicollinearity and leads to unstable models and results that are difficult to interpret. The variance inflation factor is a decisive metric for recognizing multicollinearity and indicates the extent to which the correlation with other predictors increases the variance of a regression coefficient. A high value of this metric indicates a high correlation of the variable with other independent variables in the model. In the following article, we look…

This article argues that Ethereum, far beyond being a mere technical protocol or financial instrument, constitutes a philosophical infrastructure: a machinic system that encodes, performs, and experiments with foundational categories of thought—being, time, knowledge, ethics, aesthetics, and subjectivity. Drawing from a wide range of philosophical traditions—from ancient metaphysics to posthumanism, from Stoicism to Deleuzean assemblage theory—we interpret Ethereum as a “pluriversal machine” that generates new forms of ontological and political reality through protocol design, cryptographic consensus, and distributed coordination. We explore how Ethereum recasts ontology as procedural and composable; time as synthetic and programmable; knowledge as trustless and collectively verified;…

Apple released emergency security updates to patch two zero-day vulnerabilities that were used in an “extremely sophisticated attack” against specific targets’ iPhones. The two vulnerabilities are in CoreAudio (CVE-2025-31200) and RPAC (CVE-2025-31201), with both bugs impacting iOS, macOS, tvOS, iPadOS, and visionOS. “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS,” reads an Apple security bulletin released today. The CVE-2025-31200 flaw in CoreAudio was discovered by Apple and the Google Threat Analysis team. It can be exploited by processing an audio stream in a maliciously crafted…

Rating: 10 out of 10 Introduction Today’s enterprise security teams face an overwhelming problem: they are inundated with thousands of vulnerabilities, alerts, and findings from dozens of tools, yet still struggle to answer the most critical questions: Which risks matter most? How exposed am I? What vulnerabilities are more likely to be exploited? Is my remediation strategy reducing my exposure? Is my security program improving my cyber resilience? And how do we prove the value of our security efforts? Without clear prioritization, risk quantification, or visibility into how threats could chain together to impact critical assets, organizations waste time fixing…

Yesterday’s headlines have sent ripples through the cybersecurity and software supply chain communities: MITRE announced that U.S. government funding for the CVE (Common Vulnerabilities and Exposures) database was set to expire today. Overnight, the CVE Foundation emerged with a plan to maintain the program before the Critical Infrastructure and Security Agency (CISA) announced it has extended support for the program this morning. As the backbone of the global vulnerability identification system, CVE has long served as the industry’s shared language for describing digital flaws. *** This is a Security Bloggers Network syndicated blog from 2024 Sonatype Blog authored by Brian…

Cyber Attack Surge: In Q1 2025, cyber attacks per organization increased by 47%, reaching an average of 1,925 weekly attacks. Sectors Most Affected: Education saw the highest number of attacks, with 4,484 weekly, followed by government and telecommunications with 2,678 and 2,664 attacks, respectively. Regional Attack Growth: Africa had the highest average with 3,286 weekly attacks, while Latin America saw the largest YoY increase at 108%. Ransomware Surge: Ransomware attacks rose by 126%, with North America accounting for 62% of global incidents, and Consumer Goods & Services being the most targeted sector. The first quarter of 2025 saw cyber attacks…