Author: HackWatchit

As the saying goes, “Security is only as strong as the people behind it.” With cyberthreats growing smarter and more targeted, your first line of defense — your end users — have become potential points of vulnerability. For decades, cybersecurity strategies have focused on defending networks, securing endpoints and deploying sophisticated firewalls. However, the paradigm is quickly shifting towards a user-based model. Business leaders and IT professionals realize that while systems are becoming more secure, users remain the weakest link and the primary target for cyberattacks. This is because the human aspect can be easily manipulated through tactics such as…

A new and potentially devastating alliance has emerged in the world of cybercrime. EvilCorp, an infamous cybercriminal group suspected to be led by an ex-FSB officer from Russia, has partnered with RansomHub, a notorious ransomware-as-a-service (RaaS) provider. This collaboration has already set the stage for large-scale, sophisticated cyberattacks that could wreak havoc on global industries and pose a significant challenge for law enforcement agencies attempting to curtail cybercrime. EvilCorp, which has built a reputation for its brazen financial crimes, has long been a thorn in the side of global cybersecurity efforts. The group’s reach spans across multiple continents, but it…

Jacksonville, United States, April 3rd, 2025, CyberNewsWire Secure Ideas, a premier provider of penetration testing and security consulting services, proudly announces its recent achievements of CREST accreditation and CMMC Level 1 compliance, reinforcing its commitment to delivering the highest standards of security assessment and regulatory compliance for its clients. With these certifications, Secure Ideas strengthens its ability to deliver globally recognized, standards-based offensive security services, specializing in identifying vulnerabilities, exploiting weaknesses, and exposing gaps in critical systems. CREST Accreditation: Excellence in Penetration Testing Secure Ideas’ achievement of CREST (Council for Registered Ethical Security Testers) accreditation underscores its adherence to the…

Ivanti has released security updates to patch a critical Connect Secure remote code execution vulnerability exploited by a China-linked espionage actor to deploy malware since at least mid-March 2025. Tracked as CVE-2025-22457, this critical security flaw is due to a stack-based buffer overflow weakness. It impacts Pulse Connect Secure 9.1x (which reached end-of-support in December), Ivanti Connect Secure 22.7R2.5 and earlier, Policy Secure, and Neurons for ZTA gateways. According to Ivanti’s advisory, remote threat actors can exploit it in high-complexity attacks that don’t require authentication or user interaction. The company patched the vulnerability on February 11, 2025, with the release…

Originally Aired on July 12, 2021 Articles discussed in this episode: 00:00 – BHIS | Talkin’ Bout News 2021-07-12 01:56 – Story # 1: https://www.bleepingcomputer.com/news/security/biden-asks-putin-to-crack-down-on-russian-based-ransomware-gangs/ 03:09 – Russia’s R.A.R.E. Program 03:54 – Story # 2: https://www.securityweek.com/solarwinds-confirms-new-zero-day-flaw-under-attack 05:33 – Story # 3: https://thehackernews.com/2021/07/hackers-spread-biopass-malware-via.html 08:44 – Story # 4: https://thehackernews.com/2021/07/magecart-hackers-hide-stolen-credit.html 11:53 – Story # 5: https://www.bleepingcomputer.com/news/security/mint-mobile-hit-by-a-data-breach-after-numbers-ported-data-accessed/ 15:31 – Story # 6: https://www.microsoft.com/security/blog/2021/07/12/microsoft-to-acquire-riskiq-to-strengthen-cybersecurity-of-digital-transformation-and-hybrid-work/ 18:42 – Story # 7: https://threatpost.com/lazarus-engineers-malicious-docs/167647/ 29:02 – Story # 8: https://www.bleepingcomputer.com/news/security/insurance-giant-cna-reports-data-breach-after-ransomware-attack/ 35:21 – Story # 9: https://thehackernews.com/2021/07/critical-flaws-reported-in-philips-vue.html 46:19 – Story # 10: https://www.bleepingcomputer.com/news/security/fashion-retailer-guess-discloses-data-breach-after-ransomware-attack/ 48:16 – Story # 11: https://www.securityweek.com/morgan-stanley-hit-accellion-hack-through-third-party-vendor 49:37 – PDF Doc Details: https://www.doj.nh.gov/consumer/security-breaches/documents/morgan-stanley-20210702.pdf Ready to learn more?…

Topic:  Risk, Compliance, and Resilience: Key to Information Security Management Watch Now Abstract:  In today’s rapidly evolving digital landscape, organizations face an increasing number of security threats, challenging their data security infrastructure. Compliance in risk management is among the most rudimentary frameworks that any organization with an IT infrastructure needs to develop and adopt, making it one of the important pillars of information security management. This webinar explores the essential strategies needed to establish and maintain a secure and compliant information security program. It will also highlight major global compliance regulations and the process of developing and implementing a compliant…

It’s early but not too early to note that President Donald Trump’s all-out World War on cross-border fentanyl smuggling into the United States, the highly lethal synthetic opiate responsible for 120,000 American overdose deaths in recent years, is achieving remarkable impacts for the first time in a decade. A key indicator of broader total smuggling at and between the southern border’s ports of entry — U.S. law enforcement seizures of fentanyl — has dropped 50% since the November election, indicating a greater decline in total fentanyl smuggling. That decline is attributable to Trump’s reset of U.S. Customs and Border Protection orders to aggressively hunt…

Cybersecurity researchers at Jscamblers have uncovered a sophisticated web-skimming campaign targeting online retailers. The campaign utilizes a legacy application programming interface (API) to validate stolen credit card details in real time before transmitting them to malicious servers. This technique allows attackers to ensure they are only harvesting active and valid card numbers, significantly increasing the efficiency and potential profit of their operations. According to Jscrambler’s analysis, shared with Hackread.com, this web-skimming operation has been ongoing since at least August 2024. The attack starts with the injection of malicious JavaScript code, designed to mimic legitimate payment forms, into the checkout pages…

Europol-led operation shuts down CSAM platform Kidflix, leading to 79 arrests Pierluigi Paganini April 03, 2025 An international law enforcement operation shuts down Kidflix, a child sexual abuse material (CSAM) streaming platform with 1.8M users. An international operation, codenamed Operation Stream, against child sexual exploitation shuts down one of the largest streaming platforms that offered child sexual abuse material (CSAM) in the world, Kidflix. The investigation was led by the State Criminal Police of Bavaria (Bayerisches Landeskriminalamt) and the Bavarian Central Office for the Prosecution of Cybercrime (ZCB) with the support of Europol. According to Europol, over 35 countries worldwide…