Author: HackWatchit

Cyber claims have continued their upwards trend over the past year, driven in large part by a rise in data and privacy breach incidents. The frequency of large cyber claims (>€1mn) in the first six months of 2024 was up 14% while severity increased by 17%, according to Allianz Commercial claims analysis. This followed a 41% increase in frequency but just a 1% increase in severity during 2023. Data and privacy breach-related elements are present in two thirds of these large losses. The growing significance of data breach losses among cyber insurance claims is driven by a number of notable…

A recently uncovered phishing campaign – carefully designed to bypass security defenses and avoid detection by its intended victims – is targeting firms in industrial manufacturing and other companies critical to various supply chains, Check Point researchers have warned. The phishing campaign(s) The researchers believe that the campaign has been mounted by financially motivated threat actors. Its goal is to deliver a malicious ZIP archive that contains a PowerShell script that will be executed in memory, and use it to ultimately deliver a custom in-memory implant/backdoor called “MixShell”. The malware uses DNS TXT tunneling with HTTP fallback for C2 communications…

Experts warn of actively exploited FreePBX zero-day Pierluigi Paganini August 29, 2025 Sangoma warns of an actively exploited FreePBX zero-day affecting systems with publicly exposed admin control panels. The Sangoma FreePBX Security Team addressed an actively exploited FreePBX zero-day vulnerability, tracked as CVE-2025-57819 (CVSS score of 10.0), impacting systems with an internet-facing administrator control panel (ACP). FreePBX is an open-source telephony software platform that provides a web-based graphical interface for managing Asterisk, the most widely used open-source PBX (Private Branch Exchange). With FreePBX, organizations can set up and manage features like: VoIP (Voice over IP) calls Call routing and extensions Voicemail,…

Google is working to resolve authentication issues affecting some ChromeOS devices, which are preventing affected users from signing into their Clever and ClassLink accounts. As the company explains in a recently updated incident report on the Google Workspace Status Dashboard, these authentication failures impact devices running version 16328.55.0 with Chrome browser version 139.0.7258.137. These issues are disrupting Single Sign-On access to Clever and ClassLink educational partner platforms that are used to manage student access to digital resources.  ClassLink is used by over 22 million students and staff in more than 3,000 school systems across 50 U.S. states and 42 countries, while Clever is…

Black Duck has released a new GitHub App designed to make it easier for development and security teams to automate security testing across their repositories. Now available in the GitHub Marketplace, the Black Duck Security GitHub App integrates with Polaris, Black Duck SCA, and Coverity, streamlining both onboarding and continuous synchronisation of GitHub repositories. The integration allows teams to configure and run static application security testing (SAST) and software composition analysis (SCA) scans on projects at scale, whether in SaaS or on-premises environments. By embedding security checks directly into developer workflows, Black Duck aims to improve time to value and…

Dataset preparation for an object detection training workflow can take a long time and often be frustrating. Label Studio, an open-source data annotation tool, can lend a hand by providing an easy way to annotate datasets. It supports a wide variety of annotation templates, including computer vision, natural language processing, and audio or speech processing. However, we’ll focus specifically on the object detection workflow. But what if you want to take advantage of pre-annotated open-source datasets, such as the Pascal VOC dataset? In this article, I’ll show you how to easily import those tasks into Label Studio’s format while setting…

A supply chain attack called “s1ngularity” on Nx versions 20.9.0-21.8.0 stole thousands of developer credentials. The attack targeted macOS and AI tools, according to GitGuardian’s analysis. A sophisticated cyberattack, dubbed the “s1ngularity” attack, has compromised Nx, a popular build platform widely used by software developers. The attack, which began on August 26, 2025, is a supply chain attack, a type of security breach where hackers sneak malicious code into a widely used piece of software, which then infects all the people who use it. The attack was designed to steal a wide variety of sensitive data, including GitHub tokens, npm…

While such activity so far does not appear to be the norm across the ransomware ecosystem, the findings represent a stark warning.“There are definitely some groups that are using AI to aid with the development of ransomware and malware modules, but as far as Recorded Future can tell, most aren’t,” says Allan Liska, an analyst for the security firm Recorded Future who specializes in ransomware. “Where we do see more AI being used widely is in initial access.”Separately, researchers at the cybersecurity company ESET this week claimed to have discovered the “first known AI-powered ransomware,” dubbed PromptLock. The researchers say…

New research from NETSCOUT Systems confirms that DDoS (Distributed Denial-of-Service) attacks continue to dominate the digital battlefield, posing unprecedented risks to critical infrastructure worldwide. This comes as AI integration, persistent hacktivist campaigns, and nation-state actors are increasingly weaponizing DDoS attacks. The firm also disclosed that over 8 million DDoS attacks were observed globally in the first half of this year, including over 3.2 million in EMEA alone. These attacks have evolved into precision-guided tools of geopolitical influence, capable of destabilizing critical infrastructure. Titled ‘Digital Aftershocks: Collateral Damage from DDoS Attacks,’ the NETSCOUT report revealed several key findings. NETSCOUT observed massive…