Author: HackWatchit

The Switzerland National Cyber Security Centre (NCSC) has introduced a mandatory reporting requirement for cyberattacks targeting critical infrastructure, effective from April 1. Critical infrastructure operators must report any cyberattacks to the NCSC within 24 hours of detection. The reporting requirement is set out in the Information Security Act (ISA) and the Cybersecurity Ordinance (CSO). Also, these reports will allow the NCSC to support victims of cyberattacks and notify other critical infrastructure operators. Additionally, the NCSC’s Federal Council has decided to implement the relevant legislation for fines on Oct. 1 to give those concerned sufficient time to prepare for the new…

Boston, USA, March 11th, 2025, CyberNewsWire GitGuardian, the security leader behind GitHub’s most installed application, today released its comprehensive “2025 State of Secrets Sprawl Report,” revealing a widespread and persistent security crisis that threatens organizations of all sizes. The report exposes a 25% increase in leaked secrets year-over-year, with 23.8 million new credentials detected on public GitHub in 2024 alone. Most concerning for enterprise security leaders: 70% of secrets leaked in 2022 remain active today, creating an expanding attack surface that grows more dangerous with each passing day. “The explosion of leaked secrets represents one of the most significant yet…

3 Feb 2023 Informational, InfoSec 101, News, Podcasts 00:00 – PreShow Banter™ — Woke Up Like This03:20 – BHIS – Talkin’ Bout [infosec] News 2023-01-3005:04 – Story # 1: GoTo says hackers stole customers’ backups and encryption keyhttps://www.bleepingcomputer.com/news/security/goto-says-hackers-stole-customers-backups-and-encryption-key/09:48 – Story # 2: T-Mobile hacked to steal data of 37 million accounts in API data breachhttps://www.bleepingcomputer.com/news/security/t-mobile-hacked-to-steal-data-of-37-million-accounts-in-api-data-breach/11:29 – Story # 3: Appliance makers sad that 50% of customers won’t connect smart applianceshttps://arstechnica.com/gadgets/2023/01/half-of-smart-appliances-remain-disconnected-from-internet-makers-lament/23:11 – Story # 4: More Ransomware Victims Are Refusing to Pay Hackershttps://gizmodo.com/ransomware-hackers-blockchain-chainalysis-185000576425:34 – Story # 5: DOJ, FBI hack Hive Network, save US$130 mln from crypto ransomware attackshttps://forkast.news/headlines/doj-fbi-hack-hive-network-save-us130-mln-from-crypto-ransomware-attacks/27:27 – Story…

Fake Elon Musk endorsements are used in SMS campaigns to sell bogus energy-saving devices. Learn how to spot these scams and protect yourself from fraudulent text messages, as revealed by Bitdefender’s research. A recent wave of malicious text messages has been targeting individuals in the United States, promising reductions in electricity bills through a so-called innovative device. Bitdefender security researchers have exposed a scam that uses Elon Musk‘s name to make its fake claims seem more believable. According to Bitdefender’s report, which was shared with Hackread.com ahead of its publication on Tuesday, the scam exploits a common consumer desire to…

Organizations today face an unprecedented challenge – managing complex security operations against increasingly sophisticated cyberthreats. While internal teams work tirelessly, the sheer scale and complexity of modern threats often exceed their capacity. Advanced security tools are crucial, but they’re only part of the solution. What organizations need is a strategic partner, an expert guide to help navigate the intricacies of security operations, identify emerging risks and drive continuous improvement. In this high-stakes environment, success in cybersecurity isn’t just about having the right technology; it’s about combining tools with expertise to stay ahead of threats and protect critical assets. To solve…

Check Point’s latest threat index highlights a new campaign involving the malware, AsyncRAT, a remote access trojan targeting Windows systems since 2019. The fourth most prevalent malware of the month, AsyncRAT, enables data theft, command execution, and system compromise. The latest attacks utilized TryCloudflare tunnels and malicious Python packages, starting with phishing emails that contained Dropbox URLs. This led to a multi-step infection chain involving LNK, JavaScript, and BAT files, culminating in an obfuscated AsyncRAT payload deployment. This campaign reflects a growing trend of exploiting legitimate platforms like Dropbox and TryCloudflare to evade detection and establish persistence. The Increasing Threat…

Introduction: Can AI really distinguish dog breeds like human experts? One day while taking a walk, I saw a fluffy white puppy and wondered, Is that a Bichon Frise or a Maltese? No matter how closely I looked, they seemed almost identical. Huskies and Alaskan Malamutes, Shiba Inus and Akitas, I always found myself second-guessing. How do professional veterinarians and researchers spot the differences at a glance? What are they focusing on? 🤔 This question kept coming back to me while developing PawMatchAI. One day, while struggling to improve my model’s accuracy, I realized that when I recognize objects, I…

CISOs face mounting pressure to spend wisely on security. Yet, many organizations remain vulnerable due to misplaced priorities and inefficient budgeting. This article explores common pitfalls and offers strategies to strengthen cybersecurity. Recent data highlights a paradox: while cybersecurity budgets rise, security incidents continue unabated. A survey by the Ponemon Institute revealed a 59% increase in cyber budgets year-over-year, yet 61% of organizations experienced a data breach or cybersecurity incident in the past two years. This discrepancy suggests that increased spending doesn’t necessarily translate to improved security. “The most pervasive waste in cybersecurity isn’t from insufficient tools – it’s from…

SideWinder APT targets maritime and nuclear sectors with enhanced toolset Pierluigi Paganini March 11, 2025 The APT group SideWinder targets maritime and logistics companies across South and Southeast Asia, the Middle East, and Africa. Kaspersky researchers warn that the APT group SideWinder (also known as Razor Tiger, Rattlesnake, and T-APT-04) is targeting maritime, logistics, nuclear, telecom, and IT sectors across South Asia, Southeast Asia, the Middle East, and Africa. SideWinder (also known as Razor Tiger, Rattlesnake, and T-APT-04) has been active since at least 2012, the group mainly targeted Police, Military, Maritime, and the Naval forces of Central Asian countries. In…