Author: HackWatchit

Landmark Admin has issued an update to its investigation of a cyberattack it suffered in May 2024, increasing the number of impacted individuals to 1.6 million. Landmark is a Texas-based third-party administrator (TPA) handling policy accounting, regulatory reporting, reinsurance support, and IT systems for major insurers nationwide like Liberty Bankers Life and American Benefit Life. In October 2024, the company warned that it detected suspicious activity on its networks on May 13th, 2024. The unauthorized access was believed to have exposed the personal information of 806,519 people, including their: Full name Home address Social Security number Tax identification number Driver’s…

The Nagios Security Team has fixed three critical vulnerabilities affecting popular enterprise log management and analysis platform Nagios Log Server. About the flaws The vulnerabilities, discovered and reported by security researchers Seth Kraft and Alex Tisdale, include: 1. A stored XSS vulnerability (CVE-2025-29471) in the web interface of Nagios Log Server that allows a standard (low-privilege) user to inject a malicious JavaScript payload into their profile’s ’email’ field to achieve privilege escalation. “When an administrator views the audit logs, the script executes, resulting in privilege escalation via unauthorized admin account creation,” Kraft says. “The vulnerability can be chained to achieve…

What is RansomHouse?RansomHouse is a cybercrime operation that follows a Ransomware-as-a-Service (RaaS) business model, where affiliates (who do not require technical skills of their own) use the ransomware operator’s infrastructure to extort money from victims. So they are a bog-standard ransomware gang?Not quite. Many ransomware operations encrypt and steal your data, demanding a ransom for a decryption key and a promise not to sell or publish the exfiltrated data on the dark web. RansomHouse, however, appears to often skip the step of encrypting victims’ data entirely – preferring to just steal the data instead, making threats to release it if a cryptocurrency…

Ray Felch // INTRODUCTION Recently I was afforded the opportunity to research the findings of a well-known security firm (F-Secure), who had discovered a vulnerability in the Guardtec KeyWe Smart Lock. The F-Secure people found that due to a design flaw, an attacker could intercept and decrypt traffic coming from a legitimate owner of the lock. I found their blog (posted in December of 2019) to be extremely fascinating and very informative. I soon became motivated to see if I could duplicate their efforts, realizing that F-Secure had issued an advisory and that the vendor had been given an opportunity…

As the number of endpoint devices increases, managing and securing them becomes complex. The traditional way of using separate security tools for desktops, mobile devices, tablets, and other endpoints is starting to fall short of maintaining security. Today, organizations need to smartly manage their devices and security in a centralized manner and leverage benefits such as patch management, software and OS deployment and remote troubleshooting. An AI-powered unified endpoint management solution leverages AI to improve employee experience and intelligently automate infrastructure management. The platform offers complete solutions for endpoint protection, securing and managing endpoints across operating systems, ensuring continuous compliance with industry…

Executive Summary Check Point Research has been observing a sophisticated phishing campaign conducted by Advanced Persistent Threat (APT) 29, a Russian-linked threat group. The operation targeted diplomatic organizations throughout Europe. The campaign appears to continue a previous operation called Wineloader, which impersonates a major European foreign affairs ministry to distribute fake invitations to diplomatic events, most commonly wine-tasting events. The campaign, which was spread via phishing emails, used a new malware dubbed Grapeloader. A new variant of Wineloader was also discovered, likely used in a later stage of the campaign. Introduction Check Point Research (CPR) identified a significant wave of…

Over the past few years, the cybersecurity landscape has been increasingly dominated by ransomware attacks. These threats have grown more complex, evolving from simple file-encryption schemes to multi-layered extortion tactics. Notably, we’ve seen the rise of double extortion—where attackers not only encrypt data but also threaten to leak it—and even triple extortion, which adds pressure through public shaming or attacks on business partners and customers. More recently, cybercriminals have pivoted toward data extortion alone, as traditional encryption-based ransomware has yielded diminishing financial returns. Now, researchers at Cyble’s Threat Intelligence team have uncovered a new variant of cyber-attack that stands out…

8M UK healthcare worker records, including IDs and financial data, exposed due to a misconfigured staff management database from UK-based software firm Logezy. Cybersecurity researcher at vpnMentor and co-founder of Security Discovery, Jeremiah Fowler, recently uncovered a major data leak involving a UK-based software company, Logezy, which specializes in employee data management. According to Fowler’s investigation, shared with Hackread.com, the exposed data revealed nearly 8 million records, totaling 1.1 TB of data (7,975,438 files), stored in a database that lacked both password protection and encryption. The exposed database contained sensitive information, including work authorization documents, national insurance numbers, certificates, electronic…

Can Real-Time Cybersecurity Work in Web3? The blockchain ecosystem has been defined by its ability to decentralize power. But in doing so, it’s also opened itself to a growing volume of exploits, smart contract bugs, and wallet-level attacks. This raises a central question: Can real-time cybersecurity protocols, like those used in Web2 infrastructure, be implemented in decentralized systems? Fuse, a layer 2 blockchain focused on crypto payments, believes the answer lies in collaboration. On April 15, it announced a partnership with Check Point Software to deploy the first advanced blockchain firewall designed to prevent threats in real time. The move…