Author: HackWatchit
Mastronardi Produce, North America’s largest greenhouse produce distributor, has been at the forefront of sustainable agriculture for over 70 years. In that time, being a leader in both agriculture and innovation has come with diverse cybersecurity challenges, including protecting sensitive data, securing against vulnerabilities, and reducing shadow IT risks. To address them, Mastronardi turned to the AI-powered CrowdStrike Falcon® platform, deploying CrowdStrike Falcon® Data Protection for sensitive data security, CrowdStrike Falcon® Exposure Management for proactive vulnerability management, and CrowdStrike Falcon® Complete Next-Gen MDR to manage endpoint detection and response. With these solutions, Mastronardi has built a robust cybersecurity strategy that…
The FBI and authorities in The Netherlands this week seized dozens of servers and domains for a hugely popular spam and malware dissemination service operating out of Pakistan. The proprietors of the service, who use the collective nickname “The Manipulaters,” have been the subject of three stories published here since 2015. The FBI said the main clientele are organized crime groups that try to trick victim companies into making payments to a third party. One of several current Fudtools sites run by the principals of The Manipulators. On January 29, the FBI and the Dutch national police seized the technical…
Hackers are launching attacks against Palo Alto Networks PAN-OS firewalls by exploiting a recently fixed vulnerability (CVE-2025-0108) that allows bypassing authentication. The security issue received a high-severity score and impacts the PAN-OS management web interface and allows an unauthenticated attacker on the network to bypass authentication and invoke certain PHP scripts, potentially compromising integrity and confidentiality. In a security bulletin on February 12, Palo Alto Networks urges admins to upgrade firewalls to the versions below to address the issue: 11.2.4-h4 or later 11.1.6-h1 or later 10.2.13-h3 or later 10.1.14-h9 or later PAN-OS 11.0 is also impacted but the product reached the end of…
The US Coast Guard has been urged to improve the cybersecurity infrastructure of the Maritime Transportation System (MTS), which includes ports, waterways, and vessels essential for transporting over $5.4 trillion worth of goods annually.The Government Accountability Office (GAO) has warned in a report published this week that America’s maritime transportation system lacks a proper cybersecurity strategy to protect itself, and does not have reliable access to data related to vulnerabilities and past attacks.The GAO says that it found the MTS faced “significant and increasing cybersecurity risks” including threats from China, Iran, North Korea, Russia, and international cybercrime gangs.The problem, according…
Solana-based memecoin launchpad Pump.fun has launched a mobile app supporting iOS and Android devices, according to a Feb. 14 announcement.The app allows users to buy, sell, and create tokens for free, manage their digital portfolios, and track assets in real-time. The mobile release aims to enhance accessibility for a growing user base, providing seamless interaction with the Solana blockchain on the go.The company highlighted that the app is designed with a user-friendly interface, making it easier for both experienced traders and newcomers to navigate the volatile memecoin landscape.Like the main platform, the Pump.fun app will not be available to UK…
Risk is real. To better understand cybersecurity risk, let’s compare cyber risks to risks in the natural world from hurricanes. We can learn lessons from hurricanes and unnamed storms in Florida and apply them to cybersecurity. Cybersecurity risk management can be daunting. Sometimes, it can sound academic. Did you learn the standard formula? Cyber risk = Threat x Vulnerability x Consequence Cyber risk can be a dry subject, involving many ‘what ifs.’ It’s a topic often left to governance and compliance specialists in quiet offices, but cyber risk management should be obvious, active, and involve the whole organization. Why Risk…
RansomHub emerges as a major ransomware threat in 2024, targeting 600 organizations after ALPHV and LockBit disruptions. Group-IB reveals its rapid rise in cybercrime. Group-IB’s latest research, shared exclusively with Hackread.com, highlights the sudden rise of ransomware-as-a-service operations, with one group being very active in this domain, identified as RansomHub. Emerging in early 2024, RansomHub quickly established itself as a major player, capitalizing on the disruption of other prominent groups like ALPHV and LockBit. Group-IB’s investigation reveals that RansomHub strategically advertises its partnership program on underground forums like the RAMP forum, actively recruiting affiliates from disbanded ransomware operations, which helps…
For less than the cost of a latte and in under 10 minutes, scammers today can create shockingly convincing deepfake videos of anyone: your mom, your boss, or even your child. Imagine receiving a video call from your mom asking to borrow money for an emergency, or getting a voicemail from your boss requesting urgent access to company accounts. These scenarios might seem straightforward, but in 2025, they represent a growing threat: deepfake scams that can be created for just $5 in under 10 minutes. According to McAfee’s latest “State of the Scamiverse” report, deepfake scams have become an everyday…
The US Federal Bureau of Investigation (FBI) has just published an official public service announcement headlined with with a very specific warning: Cybercriminals Targeting Victims through Mobile Beta-Testing Applications. The Feds didn’t go as far as naming any specific vendors or services here, but one of the main reasons that crooks go down the “beta-testing” route is to lure users of Apple iPhones into installing software that didn’t come from the App Store. (We’re guessing that explicitly naming Apple would not only be a bit unfair, but might also give a false sense of security to anyone who doesn’t have…