Author: HackWatchit

Software is the invisible infrastructure of our world, powering everything from critical systems to everyday devices. But its ubiquity makes it a prime target. The question is not just how secure this software is, but who bears the ultimate responsibility for safeguarding it from increasingly sophisticated threats? This is a critical question for IT security professionals, software developers, and indeed, all of society. The software supply chain provides a significant amount of innovation, but also it is the source of many hidden risks. While it enables critical operations, it also presents a significant attack surface. Even federal agencies, entrusted with…

Former developer jailed after deploying kill-switch malware at Ohio firm Pierluigi Paganini August 22, 2025 Ex-developer jailed 4 years for sabotaging Ohio employer with kill-switch malware that locked employees out after his account was disabled. Ex-developer Davis Lu (55) was sentenced to 4 years for sabotaging Ohio employer with kill-switch malware that locked staff out after his account was disabled. The Chinese national was also sentenced to three years of supervised release for writing and deploying malicious code on his then-employer’s network.  In March, a jury convicted Davis Lu, 55, of intentionally damaging protected computers while working as a software…

CrowdStrike reports COOKIE SPIDER using malvertising to spread SHAMOS macOS malware (a new variant of AMOS infostealer), stealing credentials, crypto wallets, and targeting 300+ environments. Between June and August this year, macOS users looking for solutions to routine technical issues were targeted by a campaign run by the cybercrime group COOKIE SPIDER. The attackers purchased ads that appeared as legitimate help sites, but instead of offering real fixes, these sites instructed visitors to run a one-line command in Terminal. That command delivered SHAMOS, a new variant of the AMOS infostealer, onto their systems. For your information, one-line installation command is…

The U.S. CISA (Cybersecurity Infrastructure Security Agency) announced on Wednesday that it is spearheading a cross-agency initiative, alongside DARPA (Defense Advanced Research Projects Agency), OUSD R&E (Office of the Under Secretary of Defense for Research and Engineering), NSA (National Security Agency), and NNSA (National Nuclear Security Agency), to close what it calls the ‘software understanding gap,’ aiming to help both developers and users better analyze and validate software functionality, safety, and security before deployment. The effort builds on a joint report released earlier this year and a new analysis from Sandia National Laboratories that outlines the gap’s risks and strategic…

Ransomware continues to be the major threat to large and medium-sized businesses, with numerous ransomware gangs abusing AI for automation, according to Acronis. Ransomware gangs maintain pressure on victims From January to June 2025, the number of publicly reported ransomware victims jumped 70% compared to the same period in both 2023 and 2024. February stood out as the worst month, with 955 reported cases. Cl0p alone was responsible for 335 of those cases, a 300% month-over-month surge that leveraged the mass exploitation of high-severity vulnerabilities in CLEO MFT platforms (Harmony, VLTrader, Lexicom), CVE-2024-50623 (remote code execution) and CVE-2024-55956 (command injection).…

A Chinese state-sponsored hacking group known as Murky Panda (Silk Typhoon) exploits trusted relationships in cloud environments to gain initial access to the networks and data of downstream customers. Murky Panda, also known as Silk Typhoon (Microsoft) and Hafnium, is known for targeting government, technology, academic, legal, and professional services organizations in North America. The hacking group, under its numerous names, has been linked to numerous cyberespionage campaigns, including the wave of Microsoft Exchange breaches in 2021 that utilized the ProxyLogon vulnerability. More recent attacks, include those on the U.S. Treasury’s Office of Foreign Assets Control (OFAC) and the Committee on Foreign Investment.…

Noah Michael Urban, a 20-year-old Florida man, was sentenced for his role as a member of the notorious Scattered Spider threat group in a series of phishing and other scams between 2022 and 2023 in which they got victims’ credentials and used them to steal corporate information, customer data, and cryptocurrency. The post 20-year-old Scattered Spider Member Sentenced to 10 Years in Prison appeared first on Security Boulevard.

Your team’s ability to identify phishing attempts in their inboxes has the potential to make or break your entire security posture, which is why having an effective training program in place is so important. Over the years, phishing training has evolved from annual slide deck presentations in the conference room to more engaging, dynamic, interactive and personalized experiences. Today, simulation-based training has become the gold standard widely adopted among security-focused organizations. This shift is certainly a step in the right direction, but with CISOs having to navigate a complex threat landscape and tight budgets, things can quickly go off track…

Learning (ML) model should not memorize the training data. Instead, it should learn well from the given training data so that it can generalize well to new, unseen data. The default settings of an ML model may not work well for every type of problem that we try to solve. We need to manually adjust these settings for better results. Here, “settings” refer to hyperparameters. What is a hyperparameter in an ML model? The user manually defines a hyperparameter value before the training process, and it does not learn its value from the data during the model training process. Once defined,…