Author: HackWatchit
What is the Cactus ransomware?Cactus is a ransomware-as-a-service (RaaS) group that encrypts victim’s data and demands a ransom for a decryption key.Hundreds of organisations have found themselves the victim of Cactus since it was first discovered in March 2023, with their stolen data published on the dark web as an “incentive” to give in to the extortionists’ demands.So far, so sadly normal. What makes Cactus different?Cactus made a name for itself by exploiting vulnerabilities in VPN appliances to gain access to corporate networks and encrypting its own code in an attempt to avoid detection by anti-virus products. More recently researchers have…
ChatGPT launched in 2022 and kicked off the Generative Ai boom. In the two years since, academics, technologists, and armchair experts have written libraries worth of articles on the technical underpinnings of generative AI and about the potential capabilities of both current and future generative AI models. Surprisingly little has been written about how we interact with these tools—the human-AI interface. The point where we interact with AI models is at least as important as the algorithms and data that create them. “There is no success where there is no possibility of failure, no art without the resistance of the…
China-linked APT Silk Typhoon targets IT Supply Chain Pierluigi Paganini March 05, 2025 Microsoft warns that China-backed APT Silk Typhoon linked to US Treasury hack, is now targeting global IT supply chains, using IT firms to spy and move laterally. Microsoft reported that China-linked APT group Silk Typhoon has shifted tactics to target IT solutions like remote management tools and cloud apps for initial access. Silk Typhoon is a China-linked cyber espionage group involved in the cyber attack against the US Treasury. Though not directly attacking Microsoft cloud services, they exploit unpatched apps to escalate privileges and gain access to…
The Electronic Frontier Foundation (EFF) has released a free, open-source tool named Rayhunter that is designed to detect cell-site simulators (CSS), also known as IMSI catchers or Stingrays. Stingray devices mimic legitimate cell towers to trick phones into connecting, allowing them to capture sensitive data, accurately geolocate users, and potentially intercept communications. With the release of the Rayhunter, EFF seeks to give users the power to detect these instances, allowing them to protect themselves and also help draw a clearer picture of the exact deployment scale of Stingrays. How Rayhunter works Rayhunter is an open-source tool designed to detect Stingrays…
Agentic AI is reshaping the future of security operations by enabling autonomous agents to tackle complex challenges and independently resolve incidents. In this blog, we’ll break down the key differences between agentic AI and generative AI, explore the role of multi-AI-agent systems in security, and examine how agentic AI frameworks are driving advancements in security operations. You’ll also learn how generative AI has impacted the cybersecurity landscape and why multi-agent AI systems will become essential tools in modern defense strategies. What Is Agentic AI? Agentic AI refers to an advanced artificial intelligence architecture designed to perform tasks autonomously. It leverages…
Knights of Old, a 150-year-old UK company, is gone – due to a cyberattack! This terribly unfortunate event is a good example of how cybersecurity matters to every company that depends on digital technology – even if it is to run your books or manage your logistics. Failures in cybersecurity can cause catastrophic impacts, up to and including the total loss of a business. The other point is that cybersecurity is not binary. It is not you have cybersecurity or you don’t – but rather how good your cybersecurity capability (tools, behaviors, and processes) is in relation to the…
London, United Kingdom, March 5th, 2025, CyberNewsWire AI Soft has announced the upcoming public release of Alli AI, an advanced artificial intelligence-powered platform designed for content creation. Following the conclusion of a closed beta phase, the platform will soon be available with a free trial version, allowing users to explore its capabilities. Alli AI offers a range of tools for image enhancement, background modification, photo animation, video generation, and voice synthesis, catering to designers, photographers, marketers, and digital creators. Expanding AI Applications in Content Creation Alli AI functions as both an editor and a content generator, with applications spanning social…
U.S. authorities have started releasing thousands of seized Chinese-made crypto mining machines, though most of the equipment remains in custody, Reuters reported Wednesday.It follows months of seizures at ports nationwide, initiated by the U.S. Customs and Border Protection Agency, citing requests from the Federal Communications Commission to uphold existing regulations.Decrypt has reached out to the FCC to learn more.The enforcement actions emerged amid broader concerns about Chinese technology in sensitive sectors, with trade tensions escalating from President Donald Trump’s moves to impose tariffs on China and several other countries.The agencies’ actions align with guidelines from the U.S. Department of Commerce’s…
Fix Inventory is an open-source tool for detecting compliance and security risks in cloud infrastructure accounts. It was built from the ground up for cloud-native environments and provides broad support for over 300 cloud services, including AWS, Google Cloud Platform, Azure, DigitalOcean, Hetzner, Kubernetes, and GitHub. How Fix Inventory works The tool operates in three key phases to help organizations manage their cloud security: Collect inventory data – The tool queries cloud infrastructure APIs in an agentless manner to gather metadata about resources within cloud accounts. Normalize cloud data – Fix Inventory structures this data into a graph schema, offering…