Author: HackWatchit
Introduction The evolving landscape of healthcare cybersecurity is undergoing a major transformation with the Department of Health and Human Services’ (HHS) December 27, 2024, proposal to update the HIPAA Security Rule. This update, the most significant revision since 2013, reflects the growing complexity of healthcare cybersecurity, particularly as organizations face an average of 43 cyberattacks per year according to Ponemon Institute. Background and Context Originally designed to safeguard electronic protected health information (ePHI), the HIPAA Security Rule has struggled to keep pace with the rapidly changing cyber threat landscape. While prior revisions emphasized privacy and breach notification, the 2025 update shifts…
Chinese Android phones shipped with malware-laced WhatsApp, Telegram apps Pierluigi Paganini April 16, 2025 Cheap Chinese Android phones ship with trojanized WhatsApp and Telegram clones hiding crypto clippers, active since June 2024. Since June 2024, Doctor Web researchers found cheap Android phones preloaded with fake WhatsApp and Telegram apps designed to steal crypto via clipping. These clippers swap copied wallet addresses with the attackers’ own. The campaign targeted low-end phones mimicking famous models, using altered system info to trick users. Attackers infiltrated the supply chain, embedding malware in pre-installed apps. Doctor Web warns that the attackers gained access to the…
NEC introduces Identity Cloud Service (ICS), a new identity verification solution to deliver streamlined, secure and cost-effective access management. Based on NEC’s biometric technology, ICS provides verification and search capabilities for corporations and global enterprises, financial services, hospitality, e-commerce, government services agencies and more. “ICS is an efficient, high-performance identity verification solution that allows organizations to access NEC’s top-ranked face recognition technology quickly and affordably,” says Eugene Le Roux, SVP of Digital Government for NEC Corporation of America. “The cloud-based service offers secure hosting on Microsoft Azure, including dynamic scalability and resiliency, with fast onboarding in a matter of hours.”…
Microsoft warned customers this week that their systems might crash with a blue screen error caused by a secure kernel fatal error after installing Windows updates released since March. According to advisory updates for the KB5055523 April cumulative update and the KB5053656 March preview update, this known issue affects devices running Windows 11, version 24H2. Those affected will see their PCs crash after installing these updates and restarting their devices. “After installing this update and restarting your device, you might encounter a blue screen exception with error code 0x18B indicating a SECURE_KERNEL_ERROR,” Microsoft said. Until a fix is rolled out…
ProShares has confirmed plans to launch a set of XRP futures-based exchange-traded funds (ETFs) by April 30, according to an updated April 15 filing with the US Securities and Exchange Commission (SEC).According to the filing, the asset management firm plans to introduce three futures-based funds: the ProShares UltraShort XRP ETF, the ProShares Ultra XRP ETF, and the ProShares Short XRP ETF.These funds will not hold XRP directly but will rely on futures contracts and swap agreements to gain exposure to the asset.Meanwhile, this update’s timing is notable, considering it comes less than a week after the US saw its first…
Securing cloud environments at runtime is no easy feat. Unlike traditional infrastructure, cloud workloads are dynamic, ephemeral, and often span multiple platforms — making continuous visibility a moving target. Adversaries continue to set their sights on cloud: According to the CrowdStrike 2025 Global Threat Report, new and unattributed cloud intrusions were up 26% year-over-year in 2024, indicating more threat actors seek to exploit cloud services. As a result, organizations are increasingly turning to cloud detection and response (CDR) solutions to defend their environments in real time. Cloud intrusions rarely happen in isolation. They’re often one part of a broader, cross-domain…
A data breach at insurance firm Lemonade left the details of thousands of drivers’ licenses exposed for 17 months.According to the company, on March 14 2025 Lemonade learnt that a vulnerability in its online car insurance application process contained a vulnerability that was likely to have exposed “certain driver’s license numbers for identifiable individuals.”Lemonade says that the unauthorised exposure started in approximately April 2024, and continued through September 2024.The insurance company first disclosed details of the security breach in official filings to the Attorney Generals of Texas, South Carolina, and California last week, revealing that it would be contacting affected…
Are you tired of spinning up an entire OS in a VM just to run a tool? Have you ever struggled to install a program you needed? When was the last time you spent hours troubleshooting a complex install process or resolving dependency conflicts? We’ve certainly experienced each of these problems ourselves. But since we learned to use Docker effectively we now look forward to trying out some arcane tool rather than dread getting it installed. With Docker you can: Load a fresh OS of your choosing with a simple command Create a sandbox to avoid conflicting dependencies Have a…
A critical resource that cybersecurity professionals worldwide rely on to identify, mitigate and fix security vulnerabilities in software and hardware is in danger of breaking down. The federally funded, non-profit research and development organization MITRE warned today that its contract to maintain the Common Vulnerabilities and Exposures (CVE) program — which is traditionally funded each year by the Department of Homeland Security — expires on April 16. A letter from MITRE vice president Yosry Barsoum, warning that the funding for the CVE program will expire on April 16, 2025. Tens of thousands of security flaws in software are found and…