Author: HackWatchit
Valve removed the game PirateFi from the Steam video game platform because contained a malware Pierluigi Paganini February 14, 2025 Valve removed a game from Steam because it contained malware, the company also warned affected users to reformat their operating systems. Valve removed the game PirateFi from the Steam video game platform because it contained a Windows malicious code to steal browser cookies and hijack accounts. The company also warned affected users to fully reformatting the operating systems to remove the threat. According to the website PCMag, the free-to-play game PirateFi was released last week. A few days later, Valve…
The AI boom has spurred massive demand for graphics processing units (GPUs). As many enterprises seek to integrate AI technology into their systems, providers of GPU infrastructure are helping businesses get access to the chips they need. In the latest development, GMI Cloud, a San Jose-based startup that provides GPU cloud infrastructure, has raised an $82 million Series A led by Headline Asia with participation from strategic investors such as Banpu, a Thailand energy firm, and Wistron, a Taiwan-based electronics company. Banpu will offer power to GMI Cloud, while Wistron will co-develop products with the startup. The company’s strategic partnerships…
Rapid7’s vulnerability research team says attackers exploited a PostgreSQL security flaw as a zero-day to breach the network of privileged access management company BeyondTrust in December. BeyondTrust revealed that attackers breached its systems and 17 Remote Support SaaS instances in early December using two zero-day bugs (CVE-2024-12356 and CVE-2024-12686) and a stolen API key. Less than one month later, in early January, the U.S. Treasury Department disclosed that its network was breached by threat actors who used a stolen Remote Support SaaS API key to compromise its BeyondTrust instance. Since then, the Treasury breach has been linked to Chinese state-backed…
The US Department of Justice (DOJ) has unsealed criminal charges against two Russian nationals, alleged to have operated a cybercrime gang that used ransomware to target over 1000 American organisations.Roman Berezhnoy and Egor Nikolaevich Glebov, 33 and 39 years old respectively, are alleged to have extorted over US $16 million in ransom payments using the Phobos ransomware.Between May 2019 and at least October 2024, Roman Berezhnoy, Egor Nikolaevich Glebov, and others are alleged to have hit a wide range of victims including a children’s hospital, health care providers, and educational institutions with their cyber attacks and ransom demands.Berezhnoy, Glebov, and…
With incidences of ransomware on the rise, nobody should even be thinking that an attack is something that couldn’t happen to them, let alone speak those words into existence. And for organizations that believe a breach couldn’t happen to them because they store their data in the cloud are burying their heads in the sand. All companies are vulnerable to ransomware. According to analyst estimates, cybercriminals were able to extort more than $1 billion in cryptocurrency payments from victims in 2023. What may have been a simple operational interruption 5 years ago has ballooned into millions of dollars per incident, loss…
Organizations are continually balancing seamless user experiences and implementing robust defenses against evolving threats. Passwords, as the first line of defense, remain a primary vulnerability, often exploited due to poor password management practices. While some multi-factor authentication (MFA) methods and password managers have become common practice, they remain insufficient in countering the sophisticated techniques used by advanced adversaries. Hardware security keys are an underutilized tool that offers substantial improvements in fortifying an organization’s defenses against unauthorized access without increasing the burden on end users. This article delves into the inherent weaknesses of current password management methods and explores how the…
Super-admin access vulnerability discovered in FortiOS Security Fabric. Exploitation could lead to widespread network breaches. Update now. Fortinet has released a crucial security update addressing a high-severity vulnerability in its FortiOS Security Fabric, the company’s integrated cybersecurity platform that connects and unifies various security products and technologies. This flaw, identified as CVE-2024-40591 (CVSSv3 Score 8.0), could allow an authenticated administrator with Security Fabric permissions to escalate their privileges to the super-admin level. The vulnerability stems from improper privilege management, specifically an incorrect privilege assignment . This issue affects multiple versions of FortiOS, including 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9, 7.0.0…
Check out best practices for preventing buffer overflow attacks. Plus, Europol offers best practices for banks to adopt quantum-resistant cryptography. Meanwhile, an informal Tenable poll looks at cloud security challenges. And get the latest on ransomware trends and on cybercrime legislation and prevention! Dive into six things that are top of mind for the week ending Feb. 14. 1 – CISA, FBI offer buffer overflow prevention tips The U.S. government is urging software makers to adopt secure application-development practices that help prevent buffer overflow attacks. This week, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of…
In the most recent revision of the OWASP Top 10, Broken Access Controls leapt from fifth to first.1 OWASP Top 10 Updates OWASP describes an access control as something that “enforces policy such that users cannot act outside of their intended permissions.” So, whenever we find that we can do something in a web application that we should not be allowed to do with our current permissions, then we have found an access control vulnerability. In addition to being common, access control vulnerabilities are often high impact when exploited. Access control vulnerabilities can manifest in several different ways. For now,…