Author: HackWatchit

200 Swedish municipalities impacted by a major cyberattack on IT provider Pierluigi Paganini August 28, 2025 Cyberattack on Miljödata disrupted services in over 200 Swedish municipalities, with concerns over stolen sensitive data. A cyberattack on Miljödata, an IT supplier serving 80% of Swedish municipalities, including Skellefteå, Mönsterås and Kalmar, disrupted services in over 200 municipalities and raised concerns of stolen sensitive data. The Swedish Privacy Agency confirmed that it has already received around 70 reports of cyber incidents. The cyberattack occurred over the weekend. The affected systems are used by managers and HR to handle medical certificates, rehabilitation matters, and the reporting and…

Cybercriminals have started “vibe hacking” with AI’s help, AI startup Anthropic has shared in a report released on Wednesday. An attacker used the agentic AI coding assistant Claude Code for nearly all steps of a data extortion operation that has targeted at least 17 organizations in a variety of economic sectors. The attacker provided Claude Code with a CLAUDE.md file that outlined what they expected of the coding assistant and used the AI tool to make tactical and strategic decisions throughout the attack campaign. “[The CLAUDE.md] file included a cover story claiming network security testing under official support contracts while…

Global cybersecurity agencies published a joint cybersecurity advisory detailing ongoing malicious activity by People’s Republic of China (PRC) state-sponsored Advanced Persistent Threat (APT) actors. The advisory warns of a deliberate and sustained campaign by these actors to gain long-term access to global critical infrastructure networks. The agencies strongly urge network defenders to hunt for malicious activity and apply the mitigations in the advisory to reduce the threat of Chinese state-sponsored and other malicious cyber activity. The advisory disclosed that APT actors have been conducting malicious operations worldwide since at least 2021. These activities have been linked to several China-based entities,…

KnowBe4, the security training provider, today released a new report entitled Navigating Cyber Threats: Infosecurity Europe 2025 Findings. The findings show that cybersecurity professionals are sounding the alarm; not about increasingly sophisticated cyber threats, but about something far more human –  distraction. The new research from KnowBe4, surveyed more than 100 security professionals during the Infosecurity Europe 2025 conference to gauge the current state of cybersecurity concerns. The main findings of the report include: Distraction is a Top Cybersecurity Weakness: Distraction (43%) and lack of security awareness training (41%) are identified as primary reasons employees fall victim to cyberattacks, rather than…

If Zelle thought it had sidestepped the wrath of the courts over the rampant fraud and a series of scams between 2017-2023, just because the Trump administration dropped a suit filed by the now-severely hobbled Consumer Financial Protection Bureau, then the company was sadly mistaken. Waiting in the wings to avenge Zelle customers left scrambling, at risk and out over a billion dollars, was New Attorney General Letitia James, who doggedly pursued President Trump and who now has filed a suit against Zelle’s parent Early Warning Services, a conglomerate of big banks, for failing to safeguard customers — accusing the company…

If the first six months of the year is any indication, it could be in the dozens, TechCrunch wrote Thursday (Aug. 28). As that report notes, “mega-rounds” aren’t as prevalent these days as they were in 2021. Still, at least 12 European startups have reached “unicorn” status so far this year, meaning that they achieved valuations of more than $1 billion, which bodes well for the rest of the year. The report also contends that the funding trends so far this year provide a good indication of the sectors popular among investors, including biotech, defense technology and especially artificial intelligence (AI).…

The China-linked cyberespionage group known as Salt Typhoon has been compromising backbone and edge routers globally for persistent access to networks across multiple industries, government agencies in the US and allied countries warn. Also tracked as GhostEmperor, Operator Panda, RedMike, and UNC5807, the threat group has been conducting cyberespionage operations in the US, Australia, Canada, New Zealand, and UK, and across other regions for over half a decade, the agencies note in a joint advisory. Blamed for multiple intrusions at telecom companies in the US and Canada, and for the hacking of a US National Guard unit, Salt Typhoon has…

Shadow IT – the systems your security team doesn’t know about – is a persistent challenge. Policies may ban them, but unmanaged assets inevitably slip through. And if defenders don’t uncover them first, there’s always a risk attackers will. With just a few days of effort, Intruder’s security team uncovered multiple real-world examples of Shadow IT exposures: unsecured backups, open Git repositories, unauthenticated admin panels, and more. Every one of them contained highly sensitive data or credentials, and none required advanced exploitation. Finding the Targets  One of the most effective ways to uncover Shadow IT is subdomain enumeration. Developers may…

Palo Alto, California, August 28th, 2025, CyberNewsWire It is no secret that passwords are highly susceptible to phishing and brute force attacks. This led to the mass adoption of passkeys, a passwordless authentication method leveraging cryptographic key pairs that allows users to log in with biometrics or a hardware key. According to FIDO, over 15 billion accounts have been passkey-enabled, with 69% of users globally enabling passkeys in at least one account. The passkey promise is simple – eliminate passwords, eliminate vulnerabilities. Yet, SquareX researchers Shourya Pratap Singh, Daniel Seetoh, and Jonathan Lin disclosed a major passkey vulnerability at DEF…