Author: HackWatchit
TXOne Networks announced Version 3.2 of its Stellar solution, further enhancing its capabilities from endpoint protection to more comprehensive detection and response in operational technology (OT) environments. Stellar simplifies the journey into threat hunting and detection while overcoming the limitations of traditional information technology (IT) endpoint detection and response (EDR) solutions, which can disrupt OT operations and productivity. Purpose-built for OT environments, Stellar ensures effective security without compromising system stability. “We have observed that alert fatigue, which is common to EDR solutions, can be even more severe in OT security, with security teams feeling overwhelmed by warnings due to the…
Sydney, Australia, March 19th, 2025, CyberNewsWire Sydney-based cybersecurity software company Knocknoc has raised a seed round from US-based venture capital firm Decibel Partners with support from CoAct and SomethingReal. The funding will support go-to-market, new staff, customer onboarding and product development. The company has appointed Adam Pointon as Chief Executive Officer. “The opportunity here is limitless,” Pointon said. “You’d be hard pressed to find an organisation that couldn’t benefit in some way from using Knocknoc.” Knocknoc orchestrates network infrastructure to remove risk exposure by tying users’ network access to their SSO authentication status. By selectively opening network connections to users…
Sydney, Australia, March 19th, 2025, CyberNewsWire Sydney-based cybersecurity software company Knocknoc has raised a seed round from US-based venture capital firm Decibel Partners with support from CoAct and SomethingReal. The funding will support go-to-market, new staff, customer onboarding and product development. The company has appointed Adam Pointon as Chief Executive Officer. “The opportunity here is limitless,” Pointon said. “You’d be hard pressed to find an organisation that couldn’t benefit in some way from using Knocknoc.” Knocknoc orchestrates network infrastructure to remove risk exposure by tying users’ network access to their SSO authentication status. By selectively opening network connections to users…
In today’s digital world, data security and privacy are more critical than ever. With the increasing number of cyberattacks, data breaches, and privacy concerns, individuals and organizations alike are seeking solutions to protect sensitive information. One such solution that is gaining significant traction is decentralized data storage. What is Decentralized Data Storage? Decentralized data storage is an innovative method of storing data across a distributed network, rather than relying on a single centralized server or data center. Instead of putting all your data in one location, decentralized storage systems spread data across multiple nodes within the network. These nodes can…
GitHub Action tj-actions/changed-files was compromised in supply chain attack Pierluigi Paganini March 18, 2025 The GitHub Action tj-actions/changed-files was compromised, enabling attackers to extract secrets from repositories using the CI/CD workflow. Researchers reported that threat actors compromised the GitHub Action tj-actions/changed-files, allowing the leak of secrets from repositories using the continuous integration and continuous delivery CI/CD workflow. The tj-actions/changed-files GitHub Action is used in over 23,000 repositories, it automates workflows by detecting file changes in commits or pull requests, aiding testing, and automation. “The tj-actions/changed-files GitHub Action, which is currently used in over 23,000 repositories, has been compromised. In this attack, the…
Carrie Roberts // PowerShell’s Constrained Language (CLM) mode limits the functionality available to users to reduce the attack surface. It is meant to be used in conjunction with application control solutions like Device Guard User Mode Code Integrity. If CLM is enabled without proper application control settings, it is not an effective security solution. One method for enabling CLM the wrong way is using the __PSLockDownPolicy environment variable. This is what Microsoft has to say about that: As part of the implementation of Constrained Language, PowerShell included an environment variable for debugging and unit testing called __PSLockdownPolicy. While we have…
Advanced Data Protection (ADP) secures iCloud data with end-to-end encryption. This ensures that no one, not even Apple, can access the encrypted data, which remains secure even in the event of a cloud breach. As of February 21, 2025, Apple removed ADP for customers in the UK after the government demanded backdoor access to user data. Although the motivations behind the UK government’s request for backdoor access to user data are national security and combating criminal activity, critics argue that these measures could compromise individual privacy. Without ADP, certain iCloud data is no longer end-to-end encrypted, potentially exposing user information…
The contemporary SOC is transforming as it starts to realize the benefits of GenAI and utilize the manifestations of autonomous agentic AI, according to Tines. Additionally, the promise of security automation is coming to fruition. In theory and practice, security automation should truncate the time SOCs spend investigating and mitigating alerts. However, the tried and true saying about technology still applies: Cybersecurity still relies on the combination of people, processes, and technology. For some time, AI and security automation have achieved gains, but there have also been occasional setbacks. The IDC White Paper, Voice of Security 2025 surveyed over 900…
US sperm donor giant California Cryobank is warning customers it suffered a data breach that exposed customers’ personal information. California Cryobank is a full-service sperm bank providing frozen donor sperm and specialized reproductive services, such as egg and embryo storage. The company is the largest sperm bank in the US and services all 50 states and more than 30 countries worldwide. California Cryobank detected suspicious activity on its network on April 21, 2024, and isolated the computers from the IT network. “Through our investigation, CCB determined that an unauthorized party gained access to our IT environment and may have accessed and/or acquired files maintained…