Author: HackWatchit

Medusa Ransomware targeted over 40 organizations in 2025 Pierluigi Paganini March 07, 2025 Medusa ransomware has claimed nearly 400 victims since January 2023, with attacks increasing by 42% between 2023 and 2024. The Symantec Threat Hunter Team reported that the Medusa ransomware operators have claimed nearly 400 victims since January 2023. Experts observed a 42% increase in attacks carried out by the group between 2023 and 2024. Experts tracked the Medusa ransomware activity as Spearwing. Between January and February 2025, the ransomware gang claimed responsibility for over 40 attacks. “Like the majority of ransomware operators, Spearwing and its affiliates carry…

Organizations have zero visibility into 89% of AI usage, despite security policies according to a LayerX report. 71% of connections to GenAI tools are done using personal non-corporate accounts. Among logins using corporate accounts, 58% of connections are done without Single-Sign On (SSO). These interactions bypass organizational identity and access management (IAM) systems, leaving security teams blind to how GenAI tools are used and what data is being shared. Casual GenAI users unaware of data exposure risks Most GenAI users are casual and may not be aware of the risks of GenAI data exposure. Only 15% of enterprise employees use…

Carrie Roberts // Guest Blog OK, I admit it: I might have a problem. But seriously, can you ever really have enough screen space? In this blog post, I’ll describe a cheap solution for having a lot of screen space for your work-from-home office. I will also share other aspects of my office that make it functional and enjoyable (links are included if you are interested in imitating any of it). I’m using five 43” 4K televisions as monitors for my work-from-home office. Each TV is less than $200, and they work great for everything I do — from viewing…

Here’s a look at the most interesting products from the past week, featuring releases from Outpost24, Palo Alto Networks, Red Canary, and Sonatype. Outpost24 introduces CyberFlex to streamline attack surface management and pen testing Outpost24 has launched Outpost24 CyberFlex, a comprehensive application security solution that combines Attack Surface Management (ASM) and Penetration Testing as a Service (PTaaS) to manage and secure an organization’s external-facing applications, and deliver enhanced visibility in a flexible and agile way. Palo Alto Networks provides AI-powered security to 5G enterprise customers AI-powered Prisma SASE helps detect, protect and defend against potential threats, such as zero-day threats…

A critical command injection vulnerability impacting the Edimax IC-7100 IP camera is currently being exploited by botnet malware to compromise devices. The flaw was discovered by Akamai researchers, who confirmed to BleepingComputer that the flaw is exploited in attacks that are still ongoing. Akamai researcher Kyle Lefton told BleepingComputer that they will provide more technical details about the flaw and the associated botnet next week. After discovering the flaw, Akamai reported it to the U.S. Cybersecurity & Infrastructure Agency (CISA), who attempted to contact the Taiwanese vendor. “Both Akamai SIRT and CISA attempted to contact the vendor (Edimax) multiple times. CISA was…

Cryptocurrency offers financial freedom, but it also comes with privacy challenges. Unlike traditional banking, where transactions remain relatively private within financial institutions, most crypto transactions are recorded on a public ledger, making it easy for third parties to track financial activities. If maintaining privacy is a priority, taking extra precautions is essential. Whether you’re using crypto for transactions, remittances, or exploring decentralized finance, ensuring anonymity requires careful choices in how you buy, store, and use digital assets. Not all cryptocurrencies provide the same level of privacy. Bitcoin and Ethereum, the two most widely used digital assets, operate on transparent blockchains…

As organizations accelerate their cloud adoption for cost-efficiency, scalability, and faster service delivery, cybercriminals are taking notice. Cloud technology has become a cornerstone of modern business operations, offering unparalleled flexibility and innovation. However, with great promise of cloud technology can also bring great risk. In 2025, threat actors are anticipated to increasingly target cloud technologies, exploiting their rising complexity and potential vulnerabilities. The rapid expansion of cloud services, combined with the shift toward hybrid and multi-cloud environments, has created an intricate web of interconnected systems that presents a lucrative target for cybercriminals. With critical functions like identity and authentication now…

In September 2023, KrebsOnSecurity published findings from security researchers who concluded that a series of six-figure cyberheists across dozens of victims resulted from thieves cracking master passwords stolen from the password manager service LastPass in 2022. In a court filing this week, U.S. federal agents investigating a spectacular $150 million cryptocurrency heist said they had reached the same conclusion. On March 6, federal prosecutors in northern California said they seized approximately $24 million worth of cryptocurrencies that were clawed back following a $150 million cyberheist on Jan. 30, 2024. The complaint refers to the person robbed only as “Victim-1,” but…

When learning Python, many beginners focus solely on the language and its libraries while completely ignoring virtual environments. As a result, managing Python projects can become a mess: dependencies installed for different projects may have conflicting versions, leading to compatibility issues. Even when I studied Python, nobody emphasized the importance of virtual environments, which I now find very strange. They are an extremely useful tool for isolating different projects from each other. In this article, I will explain how virtual environments work, provide several examples, and share useful commands for managing them. Problem Imagine you have two Python projects on…