Author: HackWatchit

OT Cybersecurity Platforms, 2025 As operational technology (OT) environments rapidly evolve, security strategies must keep pace with emerging risks and operational challenges. The modernization of OT calls for a fresh approach that goes beyond asset visibility to ensure resilience, safety and uptime. Protecting industrial infrastructure, especially environments with legacy systems, distributed operations and remote workforces, requires security strategies that address real-world threats, adapt to operational constraints, and support long-term reliability. We’re proud to share that Omdia’s Market Radar: OT Cybersecurity Platforms, 2025 has named Palo Alto Networks as a Leader in its latest evaluation. We received the highest possible rating,…

A serious security vulnerability has been found in popular stalkerware apps, exposing the sensitive personal information and communications of millions of people.Stalkerware is a type of spyware, frequently used to spy on every message sent or received by a romantic partner, learn who they are speaking to on their phone, learn their location, or view the photos they have taken.Although stalkerware is frequently marketed as a way to track your children’s or employees’ behaviour online, or to keep your family safe, the reality is that it is often jealous partners or those with unhealthy interest in an individual who end…

Securing Web apps, APIs, & LLMs Just Got Easier: Impart’s Native Integration with Gloo Gateway APIs are the backbone of modern applications, but they’re also one of the biggest attack surfaces. As API threats evolve and Large Language Model (LLM) security becomes a pressing concern, organizations need fast, efficient, and easy-to-deploy solutions to protect their infrastructure. That’s why we’re excited to announce Impart’s native integration with Gloo Gateway—a seamless way to bring enterprise-class security to APIs and AI-driven applications. Why This Matters If you’re using Gloo Gateway, security is now as simple as adding a few Helm annotations. With Impart’s…

BigID announced BigID Next, a cloud-native, AI-powered Data Security Platform (DSP) designed to help enterprises discover, manage, and protect their data at scale. With a modular, AI-assisted architecture, BigID Next empowers organizations to take control of their most valuable asset—data—while adapting to the fast-evolving risk and compliance landscape in the age of AI. Founded to solve data visibility challenges, BigID pioneered data discovery and classification to help enterprises comply with regulations like GDPR, CCPA, and PCI DSS. Over time, as cloud adoption accelerated and AI transformed enterprise operations, the need for risk-aware, AI-powered data security became clear. BigID Next represents…

Australia bans Kaspersky over national security concerns Pierluigi Paganini February 24, 2025 Australia bans Kaspersky software over national security concerns, citing risks of foreign interference, espionage, and sabotage of government networks. Australian Government banned products and services provided by Russian cybersecurity firm Kaspersky over national security concerns. The Secretary of the Department of Home Affairs has issued a mandatory directive under the Protective Security Policy Framework (PSPF) to manage security risks to the government. “This Direction requires Australian Government entities to prevent the installation of Kaspersky Lab, Inc. products and web services from all Australian Government systems and devices, and…

Strategy, formerly known as MicroStrategy, is nearing the half-a-million Bitcoin milestone after its latest acquisition.A Feb. 24 US Securities and Exchange Commission (SEC) filing revealed that Strategy acquired 20,356 BTC for $1.99 billion, paying an average of $97,514 per BTC.This brings the firm’s total Bitcoin holdings to 499,096 BTC, which are now valued at over $47 billion. Since the Michael Saylor-led company began accumulating Bitcoin, it has spent $33.1 billion, including fees, at an average purchase price of $66,357 per BTC.The latest buy contributes to a strong start in 2025, with Strategy reporting a 6.9% BTC yield from Jan. 1…

The post Talkin’ About Infosec News – 1/16/2024 appeared first on Black Hills Information Security.

A new information-stealing malware, ACRStealer, is leveraging legitimate platforms like Google Docs and Steam to carry out its attacks, according to research from the AhnLab Security Intelligence Center (ASEC). This malware, which initially appeared in mid-2024 as a beta version, has seen a significant increase in distribution since 2025, with February’s volume mirroring January’s and indicating a potential surge. It is worth noting that, according to Hudson Rock’s report, infostealers have become the biggest threat to critical infrastructure. The report reveals that computers belonging to the US Army, Navy, and even the FBI have been compromised, with stolen data available…

Attackers are increasingly targeting vulnerabilities in drivers, which operate in kernel mode with the highest permissions, to bypass security measures and facilitate further infections. To prevent the abuse of vulnerable drivers, Microsoft’s 2015 policy required new drivers to be signed to avoid exploitation. However, the policy allowed pre-2015 drivers to run. Attackers exploited this loophole using a legacy version of the driver Truesight.sys, which is known to have vulnerabilities in later versions. To further evade detection, the attackers generated 2,500 variants of the 2.0.2 driver, each with different hashes, by modifying specific parts of the driver while keeping the digital…