Author: HackWatchit

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday issued two new industrial control systems (ICS) advisories and updated a previous one, detailing vulnerabilities affecting INVT VT-Designer and HMITool, Schneider Electric Modicon M340 modules, and Danfoss AK-SM 8xxA Series devices. The advisories provide timely information on vulnerabilities, exploits, and other security risks affecting ICS infrastructure, and the agency called upon critical infrastructure asset owners and operators to review the technical details and recommended mitigations. In an advisory, CISA disclosed that INVT VT-Designer and HMITool equipment contained out-of-bounds write and access of resource using incompatible type (‘type confusion’) vulnerabilities. Deployed…

Critical infrastructure organisations are once again being warned of the threat posed by malicious cybercriminals, following a ransomware attack against a state-owned energy company in Pakistan. Read more in my article on the Exponential-e blog.

a lot of thoughts these days with the advent of AI and the conversations around AI. we move into an era where artificial intelligence is not just assisting but deciding on our behalf, one would ask: are we ready to let go of control? One question I think about a lot is: If intelligence becomes a utility, what becomes of expertise? , what happens when work itself becomes autonomous? Sure, we’ve automated before. But this time is different. The rise of concepts like Agentic AI (systems with the autonomy to plan, infer, and act) asks us to talk about what…

DigiCert revealed today that over the last month it has thwarted two separate distributed denial of service (DDoS) attacks that peaked at more than 2.4 and 3.7 terabits per second (Tbps). Carlos Morales, senior vice president and general manager for DDoS and application security at DigiCert, said both attacks were thwarted by UltraDDoS Protect network.. The post DigiCert Discloses Details of Two Massive DDoS Attacks appeared first on Security Boulevard.

Over 28,000 Citrix instances remain exposed to critical RCE flaw CVE-2025-7775 Pierluigi Paganini August 27, 2025 Over 28,200 Citrix NetScaler ADC/Gateway instances remain exposed to critical RCE flaw CVE-2025-7775, already under active exploitation. Experts at the Shadowserver Foundation warn that more than 28,200 Citrix instances are vulnerable to the vulnerability CVE-2025-7775, which is under active exploitation. CVE-2025-7775 (CVSS score: 9.2) is a memory overflow vulnerability leading to Remote Code Execution and/or Denial-of-Service. This week, Citrix addressed three security flaws (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424) in NetScaler ADC and NetScaler Gateway, including one (CVE-2025-7775) that it said has been actively exploited in the wild. “Exploits of CVE-2025-7775…

Cybersecurity firm Netcraft has discovered a new task scam cluster that has stolen over $1 million in crypto. The scammers use API-driven templates to impersonate brands like Delta Airlines, AMC, Universal Studios, Epic Records and more. New research from Netcraft, shared with Hackread.com ahead of its publication, reveals how a single group of cybercriminals has built a network of fake websites that impersonate major companies, including Delta Airlines, to lure in victims. This is a highly organized scam where attackers are using a clever template to trick victims out of millions of dollars in cryptocurrency. The scheme, known as a…

Multiple phishing campaigns deploying ConnectWise ScreenConnect for remote control demonstrate the sophistication, extent, and danger of AI-supercharged social engineering. An ongoing ScreenConnect threat example highlights primary aspects of modern cybercriminality: AI-enhanced, scaled, and sophisticated social engineering; use of trust and stealth to deceive security controls; and maximum use of the professionalized crime-as-a-service (CaaS) ecosphere. Current ScreenConnect campaigns differ in their attack details, but all conform to the basic process: a phishing attack leading to deployment of ScreenConnect to allow remote access and potential control of the victim organization. Researchers have found more than 900 targeted enterprises around the world. The…

Institutional investors increased their Ethereum (ETH) exposure via exchange-traded funds (ETFs) by 388,301 ETH in the second quarter, with investment advisors commanding the largest share of adoption across traditional finance sectors.According to data shared by Bloomberg ETF analyst James Seyffart, investment advisor firms control $1.35 billion in Ethereum ETF exposure, representing 539,757 ETH and capturing 219,668 ETH in net additions during the past quarter.Investment advisors dwarf other institutional segments, with hedge fund managers ranking second at $687 million in exposure. Their holdings are equivalent to 274,757 ETH, representing a 104% increase from the first quarter.Growing institutional adoptionGoldman Sachs leads individual…

Predominantly driven by the rise of AI, but also fuelled by increasing use of cloud-based software and data storage, demand for data centers continues unabated. Many estimates project global data center capacity will continue to grow at a rate of 15% year on year.1   Data centers, and the data contained within them, sit at the nexus of technology and geopolitics. It matters where a data center is located, both in terms of the national and regional jurisdictions in which it resides and in terms of its proximity to sufficient power, water and internet connectivity. It also matters what data is…