Author: HackWatchit

Global cybersecurity spending is expected to grow by 12.2% in 2025, according to the latest forecast from the IDC Worldwide Security Spending Guide. The rise in cyber threats is pushing organizations to invest more in their defenses. AI tools are making these threats more sophisticated, which is adding to the urgency. IDC says this steady climb in spending will continue through 2028, hitting $377 billion by then. The U.S. and Western Europe will still make up more than 70% of global security spending in 2025. But other regions are catching up. Latin America, Central and Eastern Europe, and the Middle…

Google’s fixing of CVE-2025-2783, a Chrome zero-day vulnerability exploited by state-sponsored attackers, has spurred Firefox developers to check whether the browser might have a similar flaw – and they found it. There’s currently no indication that the Firefox bug (CVE-2025-2857) is under active exploitation, but this should not be surprising: according to Statcounter, Chrome is used by 66.3% of internet users worldwide and Firefox only by 2.62%. About CVE-2025-2857 CVE-2025-2783 has been described as “a logical error at the intersection of Google Chrome’s sandbox and the Windows operating system” by the Kaspersky researchers who flagged it, and was found in…

What is the VanHelsing ransomware?First reported earlier in March 2025, VanHelsing is a new ransomware-as-a-service operation.Oh, so it’s a relatively new player on the malware scene, then. Why the concern?At least three victims of VanHelsing have already been identitified, and a number of variants of the malware have been analysed by security researchers. The fact that VanHelsing runs as a RaaS operation means that the problem could become significantly worse.Remind me again, what is RaaS?RaaS stands for ransomware-as-a-service. The criminals behind VanHelsing lease out their tools and infrastructure to “affiliates” who will launch the attacks, and then share a slice…

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in authoring this publication. CrowdStrike is committed to protecting our customers from the latest disclosed vulnerabilities. We are actively monitoring activity surrounding “IngressNightmare,” the name given to recently identified vulnerabilities in the Kubernetes (K8s) ingress-nginx controller. In this blog, we discuss the significance of these vulnerabilities, how CrowdStrike protects its customers from adversaries attempting exploitation, and how this issue can be discovered within the CrowdStrike Falcon® platform. Overview of IngressNightmare On…

A recent analysis published by Infoblox reveals a sophisticated phishing operation, dubbed Morphing Meerkat, actively exploiting DNS vulnerabilities for years to conduct highly effective phishing campaigns. According to researchers, this operation utilizes a phishing-as-a-service (PhaaS) platform, enabling both technical and non-technical cybercriminals to launch targeted attacks. The platform is equipped with tools to bypass security systems, including the exploitation of open redirects on adtech servers, redirection through compromised WordPress websites, and the use of DNS MX records to identify victim email service providers. Also, they use mass spam delivery and dynamic content tailoring to evade traditional security measures. “We have…

Just a few days ago, Oracle made headlines after becoming the victim of a cyberattack that led to the leak of over 6 million records, affecting both its customers and employees. Initially, the incident appeared to be a ransomware attack. However, Oracle quickly denied any breach or server encryption at that time, leading to some confusion. Recent reports have revealed that the actual data leak occurred on legacy servers belonging to Oracle Health, formerly known as Cerner. The leaked data now circulating online is reportedly linked to this breach. Cerner, which specialized in providing healthcare software services, including Electronic Health…

ORIGINALLY AIRED ON DECEMBER 13, 2021 00:00 – PreShow Banter™ 09:41 – FEATURE PRESENTATION: The Floor is Java – Log4Shell / Log4J 10:26 – Lets Jump In 11:31 – Oh No… 12:28 – None of This is New 15:36 – How Does This Work? 19:48 – Mitigations 21:48 – Find it on Hosts 23:54 – Hal Translator 25:25 – Find it on the Network 26:53 – Miners Beacon 28:24 – Great Write-Ups! 31:47 – Conversation with Q & A Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-What-You-Can Training Available live/virtual and on-demand

Phase space of a nonlinear pendulum. Photo by the author. mechanics is a way to describe how physical systems, like planets or pendulums, move over time, focusing on energy rather than just forces. By reframing complex dynamics through energy lenses, this 19th-century physics framework now powers cutting-edge generative AI. It uses generalized coordinates \( q \) (like position) and their conjugate momenta \( p \) (related to momentum), forming a phase space that captures the system’s state. This approach is particularly useful for complex systems with many parts, making it easier to find patterns and conservation laws. Table of Contents…

The Cybersecurity Maturity Model Certification (CMMC) is a cybersecurity framework designed to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) within the defense supply chain. Still, it is increasingly relevant for organizations beyond the defense sector. Over 80% of government contractors consider CMMC compliance a deciding factor in securing new contracts. By becoming CMMC compliant, businesses can increase their contract opportunities, enhance customer trust, gain a competitive edge, reduce cybersecurity risks, and simplify regulatory compliance. CMMC compliance enhances trust, opens access to DoD contracts, and differentiates businesses from competitors lacking certification. Companies need to achieve CMMC compliance, which…