Author: HackWatchit

Two men were convicted by a federal jury March 18 for their roles in a 2022 mass casualty alien smuggling event in San Antonio, Texas that resulted in 53 deaths and 11 aliens injured. A third man allegedly involved in the same fatal smuggling incident was extradited from Guatemala to the United States to face justice in the case. This investigation is being conducted by U.S. Immigration and Customs Enforcement, with the assistance of various federal and state law enforcement agencies in South Texas. Felipe Orduna-Torres, 30, also known as Cholo, Chuequito, and Negro and Armando Gonzalez-Ortega, 55, also known…

Read More

Too much of a good thing is always problematic, and cybersecurity tools are no exception. Corporate teams juggle a surplus of cybersecurity tools, all operating in silos. Walk into any security operations center, and you’ll find SIEMs, SOARs, EDRs, vulnerability scanners, and firewalls, all collecting data, generating alerts, and working in isolation. Organizations don’t just have a context problem, they have an attackability problem. Security teams are drowning in alerts but lack a clear picture of what matters. Continuous threat exposure management (CTEM) offers a solution. The Cyber Junk Drawer Problem Many security stacks are the cybersecurity equivalent of a…

Read More

“VirusTotal gives you opinions. Hybrid Analysis gives you behavior. Unknown Cyber gives you the truth in the code—before the malware even runs. That’s how we blow them both away.”— James Hess, CEO, Unknown Cyber Scan Now — See What Others Miss 🔍 Why Choose Unknown Cyber Over VirusTotal & Hybrid Analysis Scan It Smarter — Go Beyond VirusTotal 1. Deeper Static Analysis — “Genomic” Code Understanding Unknown Cyber uses deep static code analysis to inspect malware at the genomic level, identifying malware lineage, code reuse, and advanced obfuscation techniques. VirusTotal primarily aggregates results from multiple AV engines and dynamic/sandbox analysis.…

Read More

ESET investigated suspicious activity on the network of a trade group in the United States that operates in the financial sector. While helping the affected entity remediate the compromise, they made an unexpected discovery in the victim’s system: malicious tools belonging to FamousSparrow, a China-aligned APT group. The group was considered inactive, as there had been no publicly documented activity by FamousSparrow since 2022. Overview of the compromise chain used in this FamousSparrow campaign. Source: ESET FamousSparrow is a cyberespionage group that has been active since at least 2019. ESET Research first publicly documented the group in 2021 when it…

Read More

ORIGINALLY AIRED ON JANUARY 17, 2022 Articles discussed in this episode: 0:00:00 – PreShow Banter™ — Whose Ears Are Buring? 0:01:06 – BHIS – Talkin’ Bout [infosec] News 2022-01-17 0:02:27 – Story # 1: Russia takes down REvil hacking group at U.S. request – https://www.reuters.com/technology/russia-arrests-dismantles-revil-hacking-group-us-request-report-2022-01-14/ 0:07:00 – Story # 2: White House: Arrested Russian hacker was behind Colonial Pipeline attack – https://www.reuters.com/technology/russia-arrests-dismantles-revil-hacking-group-us-request-report-2022-01-14/ 0:09:29 – Story # 3: Hotel chain switches to Chrome OS to recover from ransomware attack – https://therecord.media/hotel-chain-switches-to-chrome-os-to-recover-from-ransomware-attack/ 0:15:22 – Story # 4: QNAP issues ransomware warning to users – https://www.techspot.com/news/92909-qnap-issues-warning-users-secure-or-disconnect-unprotected.html 0:19:56 – Story # 5: Backdoor RAT…

Read More

New ReaderUpdate malware variants target macOS users Pierluigi Paganini March 26, 2025 New ReaderUpdate malware variants, now written in Crystal, Nim, Rust, and Go, targets macOS users, SentinelOne warns. SentinelOne researchers warn that multiple versions of the ReaderUpdate malware written in Crystal, Nim, Rust, and Go programming languages, are targeting macOS users. ReaderUpdate is a macOS malware loader that has been active since 2020, the malicious code was first seen as a compiled Python binary and was spotted delivering Genieo adware. it remained largely undetected until resurfacing in late 2024 with new variants written in Crystal, Nim, and Rust. 1/…

Read More

In episode 43 of The AI Fix, our hosts discover a robot that isn’t terrifying, a newspaper shuns journalists in favour of AI, Graham watches a robot dog learn to stand, an AI computer programmer develops a familiar attitude, and New York tries to stop its humans arming their robots. Graham worries about AI vomit, a Norwegian man is falsely accused of murder by ChatGPT, and Mark looks at why we’re suddenly surrounded by news about robots. All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham Cluley and Mark Stockley. Powered…

Read More

The US House of Representatives introduced an updated version of the Stablecoin Transparency and Accountability for a Better Ledger Economy (STABLE) Act on March 26, substantially revising the February 5 draft. The legislation aims to regulate payment stablecoins, introduce new compliance mechanisms, expand oversight powers, and clarify key definitions governing the issuance and use of dollar-backed digital assets.The STABLE Act of 2025, formally introduced by Representatives Bryan Steil (R-WI) and French Hill (R-AR), aims to create a federal framework for payment stablecoin issuance.Additionally, the bill delineates qualified issuers into federally supervised institutions, nonbank entities approved by the Comptroller, and state-approved entities…

Read More

Broadcom today updated its VMware vDefend platform to add additional security intelligence capabilities along with a streamlined ability to micro-segment networks using code to programmatically deploy virtual firewalls.Additionally, Broadcom has made it simpler to deploy and scale out the Security Services Platform (SSP) it uses to provide a data lake for collecting telemetry data for its cybersecurity tools.Finally, the network detection and response (NDR) capability of VMware vDefend can now update threat intelligence without being connected to an external network. Umesh Mahajan, vice president and general manager for the Application Networking and Security Division of Broadcom, said these additions extend…

Read More