Author: HackWatchit

What did you last record on your iPhone? A lecture, perhaps, a call with your landlord, or notes from a doctor’s appointment you wanted to remember. Whether you used Apple’s Voice Memos or a recorder app like Voice Recorder+ AI Note Taker, that audio is stored somewhere. Where it is stored, and who can access it, deserves as much attention as the recording itself. Most of us would happily hand over our browsing history before our voice memos. A recording has your voice, other people’s voices, names, numbers, and sometimes a home address read aloud. And yet we treat these…

In brief Strive bought 124 BTC for about $10 million between Oct. 24 and Oct. 30 at an average of $80,526 each, bringing its total to 43,124 BTC. The purchase leaves Strive fourth among public companies, 390 BTC behind Twenty One Capital and 876 BTC behind Metaplanet, per Bitcoin Treasuries. Most of the buy came from existing cash, and Strive tapped its new SATS preferred stock program for the first time. Strive, the Dallas-based company co-founded by Vivek Ramaswamy, now holds 43,124 Bitcoin after buying 124 BTC more last week. That stash is now worth roughly $3.3 billion, and good…

As enterprises continue to roll out multi-factor authentication (MFA), attackers have adapted. Rather than only stealing credentials, attackers have shifted to stealing Open Authorization (OAuth) tokens, the keys that govern what applications can do on your behalf. Adversaries are already accelerating these attacks by using dynamic evasion code, phishing-as-a-service (PhaaS) templates and LLM-generated brand impersonations. Because OAuth attacks occur at the authorization layer after user authentication, stolen access and refresh tokens bypass MFA, survive password resets and grant durable access. While OAuth misuse occurs at a lower volume than traditional phishing attacks, these attacks may carry severe consequences such as:…

Authorities in the Netherlands have arrested a 24-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p. According to three sources familiar with the matter, the Dutch man arrested by authorities this month is Pepijn van der Stap, a convicted cybercriminal from Almere and Lelystad in the Netherlands. Van der Stap was previously convicted in 2023 in connection with a string of data…

AI agents and AI-enabled tools are fundamentally changing how work gets done. From coding assistants to Model Context Protocol (MCP) servers, autonomous tools now access sensitive data, execute commands, and modify local workflows directly from the endpoint. Traditional endpoint security models fail to offer the visibility or governance required to manage these autonomous actions. The security gap is already significant. Only 6% of organizations have an advanced AI security strategy. And the fastest attacks can move from initial access to data exfiltration in just 72 minutes, according to the 2026 Unit 42 Global Incident Response Report. As AI adoption grows,…

Belden Inc., a provider of complete connection solutions, recently announced a strategic partnership with Radiflow, vendor of OT cybersecurity solutions and services for critical infrastructure and industrial automation, particularly within discrete industries. Together, the companies will enable automated, intelligence-driven security enforcement across operational technology environments, closing the critical gap between threat detection and network response. As OT environments become increasingly connected, security teams face a growing challenge. Understanding operational risk is no longer enough. Organizations must be able to act on that intelligence immediately. While OT security platforms excel at identifying vulnerabilities, exposures and anomalous behavior, the enforcement of security…

Key Takeaways App spyware often disguises itself as everyday apps (e.g., flashlight, wallpaper, gaming), then embed malicious code to secretly access your camera, mic, contacts, location, and more. Excessive permission requests are a red flag, legitimate apps request only what they need. Apps asking for unrelated permissions (e.g., a game accessing contacts or microphone) are likely invasive. Learn how to spot and remove invasive apps quickly in your permission settings. Deleting beats restricting. Even disabled permissions may not stop an invasive app from collecting data. Full removal is the safest option. Use preventive habits to safeguard your privacy. Some crooks…

DHS’s new order banning Acronis AG from federal systems also sheds new light on security concerns U.S. officials have about the company’s products and services. Justin Doubleday@jdoubledayWFED October 28, 2026 5:57 pm 3 min read The Department of Homeland Security has banned Swiss cybersecurity firm Acronis AG from civilian agency networks, following a ban on the company’s products from intelligence community systems last year. DHS’s ban, laid out in an “exclusion and removal order” scheduled to be published in the Federal Register on Oct. 30, also sheds new light on security concerns U.S. officials have about Acronis’ products. While the…

Every security team is being told to adopt AI. Far fewer have been shown what “good” looks like in practice. Turnkey agents handle common, well-defined security tasks, but no two security teams operate the same way. Each has its own data, playbooks, escalation paths, and risk tolerances; unique context that no vendor can anticipate in a packaged solution. That’s why we built CrowdStrike® Charlotte AI™ AgentWorks: a no-code workspace that lets every security team build the exact agents they need, on the Falcon platform.  The power of the crowd is one of the most enduring advantages we have as an…