Author: HackWatchit

The European Union Agency for Cybersecurity (ENISA) has released an analysis of the cybersecurity threats to the space sector to strengthen the resilience of commercial satellites. The objective of the ENISA space threat landscape is to identify and assess the cybersecurity threat landscape for commercial satellites – exploring existing and emerging challenges for the industry. It also recommends cybersecurity controls and mitigation strategies for a trustworthy and uninterrupted deployment of commercial satellite systems and architectures. Such controls and strategies are the result of the identification and assessment of both current and emerging threats and vulnerabilities faced by the space sector.…

Selecting the right Laptop For Cybersecurity is one of the most critical decisions for cybersecurity professionals. Whether you are a CISO, penetration tester, ethical hacker, or IT security analyst, the hardware and software you rely on should be capable of running advanced security tools while ensuring your data remains protected from threats. A weak machine not only hinders performance but can also create vulnerabilities that attackers can exploit. With an increasing number of cyber threats emerging daily, professionals need devices that provide high processing power, security-focused features, and compatibility with various security testing tools. This guide highlights the top choices and key…

Cary, North Carolina, March 27th, 2025, CyberNewsWire INE, a global leader in networking and cybersecurity training and certifications, is proud to announce it is the recipient of twelve badges in G2’s Spring 2025 Report, including Grid Leader for Cybersecurity Professional Development, Online Course Providers, and Technical Skills Development, which highlight INE’s superior performance relative to competitors.  “INE solves the problem of accessible, hands-on security training with structured learning paths and real-world labs,” says SOC Analyst Sai Tharun K. “It helps bridge the gap between theory and practical skills. For me, it has been very valuable in refining my penetration testing,…

U.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 27, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added [1,2] the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CVE-2025-30154 reviewdog action-setup GitHub Action Embedded Malicious Code Vulnerability CVE-2019-9875 (CVSS score of 8.8) is a Deserialization of Untrusted Data in the…

(UQ) in a Machine Learning (ML) model allows one to estimate the precision of its predictions. This is extremely important for utilizing its predictions in real-world tasks. For instance, if a machine learning model is trained to predict a property of a material, a predicted value with a 20% uncertainty (error) is likely to be used very differently from a predicted value with a 5% uncertainty (error) in the overall decision-making process. Despite its importance, UQ capabilities aren’t available with popular ML software in Python, such as scikit-learn, Tensorflow, and Pytorch. Enter ML Uncertainty: a Python package designed to address…

Imagine the following scenario: The latest threat report comes out on a group that targets your vertical. The SOC quickly disseminates the report and starts to search for tactics, techniques and procedures (TTPs). Everything’s clear, no results are found. Two months later the same attacker blackmails your company with stolen data. What happened? The SOC searched for the TTPs and nothing was found. Simply, the SOC made a lot of assumptions about the environment which they are supposed to protect and the data they had to work with. In 2025, the role of security teams must evolve due to both…

Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers and the theft of account data for 6 million people, BleepingComputer has confirmed with multiple companies that associated data samples shared by the threat actor are valid. Last week, a person named ‘rose87168’ claimed to have breached Oracle Cloud servers and began selling the alleged authentication data and encrypted passwords of 6 million users. The threat actor also said that stolen SSO and LDAP passwords could be decrypted using the info in the stolen files and offered to share some of the data with anyone who could help recover them. The…

GetReal Security launched unified platform to help enterprises, government agencies and media organizations manage risk and mitigate threats from the growing presence of AI-fueled attacks. The platform brings together GetReal’s products and service offerings into a unified digital experience for users, providing the infrastructure to accommodate all modalities (image, audio and video) for both files and real-time digital communication streams. “The threat of deepfakes and manipulated media is more than one expert can handle alone. That’s why we developed our suite of leading digital forensic and cybersecurity solutions and services to protect enterprises, governments, and media,” said Dr. Hany Farid,…

Many of the accounts appear to belong to local and national politicians and political operatives ranging from US representative Dan Crenshaw of Texas to a former mayor of Deltona, Florida, as well as venture capitalists, defense industry entrepreneurs, and executives like Christian Brose, the president of defense tech giant Anduril. (Crenshaw’s office and Anduril did not respond to requests for comment.)One of the most notable appears to belong to Wiles, one of Trump’s most trusted political advisers. That account’s 182-person friend list includes accounts sharing the names of influential figures like Pam Bondi, the US attorney general, and Hope Hicks,…