Author: HackWatchit
CISO Global launched of CISO Edge, its next-generation AI-driven cloud security solution, now available to existing customers and channel partners. Built to meet the growing demand for enterprise-grade cybersecurity, CISO Edge delivers comprehensive cloud-first, hybrid, and remote security—ensuring organizations can secure their users, networks, and data anywhere in the world. CISO Edge is a cornerstone of CISO Global’s proprietary cybersecurity suite, which was valued at $50 million last year as part of the company’s extensive intellectual property portfolio. With an independent valuation of $30 million, Edge represents a critical investment in next-generation AI-driven threat intelligence, real-time attack mitigation, and proactive…
New StilachiRAT uses sophisticated techniques to avoid detection Pierluigi Paganini March 18, 2025 Microsoft discovered a new remote access trojan (RAT), dubbed StilachiRAT, that uses sophisticated techniques to avoid detection. In November 2024, Microsoft researchers discovered StilachiRAT, a sophisticated remote access trojan (RAT) designed for stealth, persistence, and data theft. Analysis of its WWStartupCtrl64.dll module revealed that the malware supports sophisticated functionalities to steal credentials from browsers, digital wallet data, clipboard content, and system information. The researchers pointed out that StilachiRAT employs advanced evasion methods. Microsoft has yet to attribute the malware to a specific threat actor or geolocation, however,…
Data is at the heart of nearly every federal agency initiative. Without high quality data, the 1,700-plus agency artificial intelligence use cases will struggle to find success. Without analysis of structured and unstructured data, agency cybersecurity efforts, especially around zero trust, will not prevent and mitigate the ever-increasing number of cyber threats. For years, the common refrain across the government has been “data is the new oil.” That analogy rings more true every day. Agencies still face a host of challenges around managing data and applying technology to get the best analysis out of it. And as agencies start to…
In its latest research report, cybersecurity firm Veriti has spotted active exploitation of a vulnerability within OpenAI’s ChatGPT infrastructure. Their research, shared with Hackread.com, focuses on CVE-2024-27564, a Server-Side Request Forgery (SSRF) flaw, which despite its classification as a medium-severity issue, is being actively weaponized in real-world scenarios. Veriti’s investigation has revealed some troubling findings. One notable discovery is the very volume of attack attempts, with 10,479 attack attempts recorded in a single week originating from just one malicious IP address. Furthermore, a significant portion of organizations, specifically 35%, are found to be inadequately protected due to misconfigurations in their…
Artificial intelligence (AI) is rapidly transforming industries, but with this innovation come new security challenges as threat actors explore AI’s powerful capabilities. They’re adopting new techniques, targeting AI models, injecting malicious code into AI processes, and exploiting vulnerabilities in AI-related software packages. Malicious AI-related software packages are being embedded in container images, sometimes without security teams realizing it. By embedding malicious AI components, adversaries can manipulate model behavior, exfiltrate sensitive data processed by AI models, or create backdoors that allow persistent access to cloud environments. These attacks can lead to data poisoning, intellectual property theft, or unauthorized control over AI-powered…
We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain: Infosec articles Challenging puzzles Comic book based on real-life hacking adventures Coloring contests Bonus Backdoors & Breaches Consultant Cards (print version only) Other stuffs You can check out current and upcoming issues here: https://www.blackhillsinfosec.com/prompt-zine/
In the ever-evolving landscape of cybersecurity, one of the most alarming and dangerous threats is the Zero-Day attack. These attacks exploit vulnerabilities in software or hardware that are unknown to the vendor or have not yet been patched. Due to their stealthy nature, Zero-Day attacks can be particularly difficult to identify and defend against. This article will explore how to identify these attacks and the potential repercussions they can have on organizations and individuals. What is a Zero-Day Attack? A Zero-Day attack refers to an exploit that takes advantage of a previously unknown vulnerability in a software application, operating system,…
March brought significant volatility to Bitcoin. After starting the month trading around $90,000, Bitcoin experienced a series of sharp declines, dipping below $80,000 by mid-March. This 10% correction came amid mounting concerns about geopolitical tensions, aggressive US trade policies, and broader economic instability. The volatility mirrored a broader risk-off sentiment, with global equity markets also sliding during this period. However, Bitcoin’s price recovered some ground toward the latter half of March, stabilizing between $82,000 and $85,000 as market anxieties cooled. This turbulence significantly impacted the Coinbase Premium Index, which is widely used to gauge US investor sentiment. A positive premium…
A recent vulnerability discovered in an UK National Health Service HS API has once again highlighted the risks associated with insecure mobile application programming interfaces (APIs). The flaw reportedly allowed unauthorized access to sensitive patient data, raising serious concerns about the security of healthcare applications. This incident underscores a broader issue in mobile security: APIs are the most vulnerable attack vector in modern applications. While organizations invest heavily in securing their back-end infrastructure, they often overlook the security of the APIs that bridge mobile apps and sensitive databases. APIs, when left unprotected, become open doors for attackers. In this blog,…