Author: HackWatchit

This week, Cycode launched its proprietary next-generation SAST engine to elevate its complete ASPM platform – and it is already achieving a breakthrough 94% reduction in false positives in OWASP benchmark tests compared to leading open-source and commercial alternatives.  Application security teams must secure expanding attack surfaces against intensifying threats while controlling costs. Noisy scans and disjointed point solutions cannot keep pace with the speed and scale of modern development. ASPM has emerged to create clarity out of complex security data and shorten the lifecycle of high-risk vulnerabilities and weaknesses. However, effective ASPM starts with high-quality data and accurate scans. …

Make a note in your diary. On Tuesday, March 18 2025, at 1pm EST, I will be joining the experts at Dashlane for an online chat all about credential security in the age of AI. Here is the blurb: The credential security landscape is at a breaking point. AI-driven phishing attacks, poor employee behaviors, and shadow IT are escalating risks, leaving IT leaders scrambling to contain unmanaged and unsecured credentials. Join cybersecurity expert Graham Cluley and Dashlane CTO Frederic Rivain as they discuss AI’s impact on credential security and share valuable insights from our new State of Credential Security Report,…

Elon Musk blames a massive cyberattack for the X outages Pierluigi Paganini March 10, 2025 Elon Musk said that the global outages impacting its platform X during the day are being caused by a cyberattack. A major cyber attack appears to be the root cause of the global outage on X, according to its CEO Elon Musk. About 40,000 users reported issues accessing Twitter, according to Downdetector.com. Musk has provided no evidence to support his claims, and this is not the first time. Last year, he attributed the delay in broadcasting an interview with Trump to another alleged cyberattack, which…

Following their recent reveal that the Black Basta leak exposed ransomware tactics, researchers from the KELA’s Cyber Intelligence Center have new information and analysis on the victim selection in Black Basta’s reconnaissance strategies. The researchers discovered that at least 11 percent of the ZoomInfo links shared in Black Basta communications were later associated with companies that appeared as confirmed ransomware victims, such as ZircoDATA, Beko Technologies, Duty Free Americas, Fortive Corporation, Peco Foods, and many more.  They noted that the average number of days between when a victim’s ZoomInfo profile was first discussed in Black Basta’s internal chats and when…

International law enforcement disrupts Garantex, a multi-billion-dollar cryptocurrency exchange used for money laundering. Two individuals, Aleksej Besciokov and Aleksandr Mira Serda, face charges. Learn about the operation and its impact. A cryptocurrency exchange, Garantex, suspected of facilitating significant financial crimes, has been dismantled by law enforcement agencies from the United States, Germany, and Finland through a collaborative effort. The operation aimed to disrupt the exchange’s infrastructure and financial activities, which is believed to be involved in money laundering activities for transnational criminal groups and violations of international sanctions. The operation has led to the unsealing of an indictment (accessible here…

1. Introduction It’s pretty clear that most of our work will be automated by AI in the future. This will be possible because many researchers and professionals are working hard to make their work available online. These contributions not only help us understand fundamental concepts but also refine AI models, ultimately freeing up time to focus on other activities. However, there is one concept that remains misunderstood, even among experts. It is spurious regression in time series analysis. This issue arises when regression models suggest strong relationships between variables, even when none exist. It is typically observed in time series regression equations…

Dale Hobbs // As the world becomes increasingly connected through the internet, cyber attacks have become more sophisticated and prevalent. One type of attack that you may not have heard of is the Machine-in-the-Middle IPv6 (MITM6) attack. In this article, we’ll explore what MITM6 attacks are, how they work, and what you can do to protect yourself and your organization against them.  What is an MITM6 Attack?  MITM6  is a type of attack that involves intercepting and manipulating the communication between two parties. In this attack, the attacker positions themselves between the two parties and acts as a proxy, allowing…

The Dark Storm hacktivist group claims to be behind DDoS attacks causing multiple X worldwide outages on Monday, leading the company to enable DDoS protections from Cloudflare. While X owner Elon Musk did not specifically state that DDoS attacks were behind the outages, he did confirm that it was caused by a “massive cyberattack.”. “There was (still is) a massive cyberattack against X,” Musk posted on X. “We get attacked every day, but this was done with a lot of resources. Either a large, coordinated group and/or a country is involved. Tracing …” Dark Storm is a pro-Palestinian hacktivist group that…

Executive Summary  Check Point Research (CPR) has uncovered a series of ongoing, targeted cyber campaigns by Blind Eagle (APT-C-36)—one of Latin America’s most dangerous threat actors Days after Microsoft released a fix for CVE-2024-43451, the group began employing a comparable technique involving harmful .url files, showing how attackers can turn security updates into weapons against their victims CPR found over 9,000 infections in just one week Attacks leverage trusted platforms like Google Drive, Dropbox, GitHub, and Bitbucket to distribute payloads, bypassing traditional security defenses The final malware, Remcos RAT, enables data theft, remote execution, and persistent access Blind Eagle’s Cyber…