Author: HackWatchit

Man-in-the-Prompt: The invisible attack threatening ChatGPT and other AI systems Pierluigi Paganini August 16, 2025 Man-in-the-Prompt: a new threat targeting AI tools like ChatGPT and Gemini via simple browser extensions, no complex attack needed. A new type of threat is alarming the world of cyber security: it is called Man-in-the-Prompt and is capable of compromising interactions with leading generative artificial intelligence tools such as ChatGPT, Gemini, Copilot, and Claude. The problem? It does not even require a sophisticated attack: all it takes is a browser extension. “LayerX’s research shows that any browser extension, even without any special permissions, can access the prompts…

Today, cybersecurity programs must go beyond deploying tools. They need to seamlessly integrate threat intelligence into every stage of defensive security for immediate operational impact. Tidal Cyber’s Threat-Led Defense Platform includes a deep well of Cyber Threat Intelligence (CTI), all aligned with MITRE ATT&CK® TTPs, enabling you to determine whether your organization can defend against the latest threats. This is bolstered through a strategic integration with ThreatConnect RQ, which provides cyber risk quantification, to expand the knowledge base of threats visible to Tidal Cyber users. The post Accelerating Threat-Led Defense with Tidal Cyber + ThreatConnect appeared first on Security Boulevard.

A little over a year ago, Moonbirds was a cautionary tale.The once-hyped Ethereum profile picture (PFP) project, launched in 2022 by Kevin Rose’s Proof to immense demand, had seen its reputation crater amid community backlash, ownership shakeups, and plummeting prices.Holders griped about broken promises, shifting roadmaps, and changing leadership. By mid-2023, the project’s floor price had fallen from double-digit ETH highs to well under 1 ETH, making it an enduring punchline in NFT circles.Fast forward to today, and Moonbirds is flying high again, re-emerging as one of the most talked-about collections in crypto. The catalyst? Its May acquisition by Orange…

Here’s a look at the most interesting products from the past week, featuring releases from Brivo, Envoy, Prove, Rubrik, and Trellix. Rubrik Agent Rewind enables organizations to undo mistakes made by agentic AI Agent Rewind, powered by Predibase AI infrastructure, will enable organizations to undo mistakes made by agentic AI by providing visibility into agents’ actions and enabling enterprises to rewind those changes to applications and data. Trellix expands data security support to ARM-compatible devices Trellix DLP Endpoint Complete offers customers protection against data exfiltration from endpoints by stopping data leakage from accidental or intentional data loss, adhering to compliance…

Introduction In today’s fast-evolving threat landscape, traditional breach detection systems often fall short in providing early warnings. CISOs are under pressure to not only respond to alerts faster but also to anticipate risks before they materialize. Public data, when harnessed correctly, provides a unique and critical early warning system for threats that have yet to trigger internal alerts. This article explores how leveraging public intelligence, including social media, open-source repositories, and curated feeds, can provide CISOs with valuable insights to stay ahead of potential threats. Why Traditional Signals Come Too Late Reliance on traditional threat detection systems can leave gaps in…

Rotherham hacker Al-Tahery Al-Mashriky jailed for 20 months after global cyberattacks, stealing millions of logins and targeting government websites. When police knocked on the door of a home in Rotherham, South Yorkshire, in August 2022, they ended a hacking spree that had stretched across North America, the Middle East and Israel. The man behind it, 26-year-old Al-Tahery Al-Mashriky, had spent months hacking into websites and collecting the personal details of millions of unsuspecting people. Al-Tahery Al-Mashriky (Mugshot via NCA) Investigators say Al-Mashriky was linked by the UK’s National Crime Agency (NCA) to hacker groups known as the Spider Team and…

Plex has notified some of its users on Thursday to urgently update their media servers due to a recently patched security vulnerability. The company has yet to assign a CVE-ID to track the flaw and didn’t provide additional details regarding the patch, only saying that it impacts Plex Media Server versions 1.41.7.x to 1.42.0.x. Yesterday, four days after releasing security updates that addressed the mysterious security bug, Plex emailed those running affected versions to update their software as soon as possible. “We recently received a report via our bug bounty program that there was a potential security issue affecting Plex…

Steve Shirley The National Defense ISAC is a non-profit, non-federal entity established and funded by its member companies to support their collective cybersecurity and resilience against all hazards. We do this through multiple lines of effort to include secure cyber threat sharing, knowledge exchange events, and technical solution working groups. All these efforts are anchored by a key principle, though, and that’s while our member companies compete energetically for work, they agree to collaborate and share intimately on cybersecurity threats and allied risks within the ISAC trust pyramid. We really see this vividly in our 24 or so technical solution…

EncryptHub abuses Brave Support in new campaign exploiting MSC EvilTwin flaw Pierluigi Paganini August 16, 2025 EncryptHub actor exploits Windows flaw CVE-2025-26633 (“MSC EvilTwin”) with rogue MSC files and social engineering to drop malware. The threat actor EncryptHub exploits the now-patched Windows flaw CVE-2025-26633 (“MSC EvilTwin”) using rogue MSC files and social engineering to deliver malware, warns Trustwave SpiderLabs. The flaw is an improper neutralization issue in Microsoft Management Console that lets unauthorized attackers bypass security features locally. “The SpiderLabs Research team recently observed an EncryptHub campaign that combines social engineering and the exploitation of the Microsoft Management Console (MMC): CVE-2025-26633.…