Author: HackWatchit

If you do business in the United States, especially across state lines, you probably know how difficult it is to comply with U.S. state data privacy laws. The federal government and many U.S. state governments require you to implement “reasonable” cybersecurity controls around how you handle data breach notification and the data privacy of your customers. But these mandates don’t discuss how you can meet the standard of reasonableness in your cybersecurity efforts. More specifically, they don’t identify frameworks to which you can align your controls implementation program. Such ambiguity around reasonableness in cybersecurity complicates your efforts to create a…

Nokia announced that Nozomi Networks is among six new Industry 4.0 applications that customers can deploy on the Nokia MX Industrial Edge (MXIE) platform. Now it’s easier than ever for industrial and critical infrastructure organizations to securely run operations and ICS across Nokia’s private 5G networks. Nokia MX Industrial Edge – a unification platform for Industry 4.0 applications A recent Analysys Mason report on applications and edge computing for private LTE/5G networks predicts a growing interest in private wireless use cases among enterprises. As a result, the enterprise application market is expected to expand rapidly, with investments reaching approximately $6…

Ray Felch // Preface: Recently, I acquired a few home automation devices, so that I might research Zigbee and get a better understanding of how this very popular wireless technology interconnects with the internet of things (IoT’s) and to determine just how secure this platform really is. I was already somewhat familiar with home automation in regard to using the Bluetooth Low Energy (BLE) Mesh topology. However, major advances have been made with IoT devices, including but not limited to: connecting very low power devices (in many cases battery-powered and lasting for years), low data rates (20-250Kbits/sec) providing for more…

Introduction The rise of Agentic AI has become one of the most talked about trends in the AI world. The move to autonomous AI Agents promises to be as big a leap forward as Generative AI was over traditional AI models. Whereas traditional AI assisted with analysis and recommendations, Agentic AI works by understanding the environment, making decisions, and taking action without human involvement.  It is no surprise that Gartner lists Agentic AI as one of the top strategic trends in 2025 and anticipates it will resolve 80% of customer service issues by 2029.  But with these massive advantages come…

Attackers are now targeting a critical authentication bypass vulnerability in the CrushFTP file transfer software using exploits based on publicly available proof-of-concept code. The security vulnerability (CVE-2025-2825) was reported by Outpost24, and it allows remote attackers to gain unauthenticated access to devices running unpatched CrushFTP v10 or v11 software. “Please take immediate action to patch ASAP. The bottom line of this vulnerability is that an exposed HTTP(S) port could lead to unauthenticated access,” CrushFTP warned in an email sent to customers on Friday, March 21, when it released patches to address the security flaw. As a workaround, admins who can’t…

Secure Network Analytics version 7.5.2 has been released, offering exciting new features such as the Network Visibility Module (NVM) and Zeek detections. We are expanding our detections across existing and new sources, and our detections engine now ingests NVM telemetry and Zeek logs, introducing nine new alerts prominently displayed in Analytics. These alerts are also aligned with the widely recognized MITRE ATT&CK framework. By integrating a more diverse range of telemetry sources, Secure Network Analytics significantly enhances network visibility and provides deeper insights into network activities. This release and its detections represent an advanced approach to broadening detection sources and…

A new security issue is putting WordPress-powered websites at risk. Hackers are abusing the “Must-Use” plugins (MU-plugins) feature to hide malicious code and maintain long-term access on hacked websites.In earlier 2025, security researchers at Sucuri noticed cybercriminals using the tactic, and they say that it has been increasingly used the technique in the months since.In WordPress, MU-plugins are plugins that are automatically enabled on a WordPress-powered site and – as the description suggests – must be used, and therefore can not be deactivated through the WordPress admin interface.These “must-use plugins” are located in a specific directory called, imaginatively enough, mu-plugins…

parts of this series, we looked at Graph Convolutional Networks (GCNs) and Graph Attention Networks (GATs). Both architectures work fine, but they also have some limitations! A big one is that for large graphs, calculating the node representations with GCNs and GATs will become v-e-r-y slow. Another limitation is that if the graph structure changes, GCNs and GATs will not be able to generalize. So if nodes are added to the graph, a GCN or GAT cannot make predictions for it. Luckily, these issues can be solved! In this post, I will explain Graphsage and how it solves common problems…

As Tax Day looms and last-minute taxpayers feel the pressure, a surge of IRS scams is on the rise.   Research by our McAfee Labs team projects a fresh wave of sophisticated tax scams as the stress of peak filing season sets in, with bogus text messages leading the way.   Nearly half of taxpayers complete their taxes between mid-March and April 15, which gives scammers ample opportunity to cash in as people rush their filings with the IRS.   Based on our data from 2024, here’s what we can expect in the coming days:  We’ll see a surge in tax scams – The…