Author: HackWatchit
Proton fixed a bug in its new Authenticator app for iOS that logged users’ sensitive TOTP secrets in plaintext, potentially exposing multi-factor authentication codes if the logs were shared. Last week, Proton released a new Proton Authenticator app, which is a free standalone two-factor authentication (2FA) application for Windows, macOS, Linux, Android, and iOS. The app is used to store multi-factor authentication TOTP secrets that can be used to generate one-time passcodes for authentication on websites and applications. Over the weekend, a user posted in a now-deleted Reddit post that the iOS version was exposing TOTP secrets in the app’s debug logs found…
Conclusion In today’s rapidly shifting digital landscape, ethical hackers need to stay agile and informed, continually adapting to new technologies such as cloud infrastructure and IoT environments. At the same time, organizations must move beyond reactive security measures and embrace proactive security planning. Businesses can significantly reduce their risk score by embedding security into the development cycle, conducting regular threat modeling, and educating users on evolving risks. Cybersecurity is not a one-time initiative but an ongoing process of vigilance, adaptation, testing, and alignment with best practices and compliance standards. With the right tools, policies, and governance, organizations can build resilient…
year, I wrote about my first 3-month manager experience. I shared some of the immediate changes I noticed, including more meetings, mentoring and coaching opportunities, a broader scope, and increased visibility into the behind-the-scenes work. Time flies, and I have now been a manager for a full year. It is a busy year as I adapt to the new challenges — as a result, I’ve gone from writing three articles on TDS each month to just one. Meanwhile, it has been a very eye-opening and rewarding year. My team grew from three to five, and now supports a wide range of functions,…
When Dave Yeager stumbled upon the chamber of shiny, casino-style slot machines, he felt an instant pull. It was his first night of deployment in Seoul, South Korea, and the United States Army officer was in a bad headspace. The September 11, 2001, attacks had just happened, and he had a wife and two children under the age of 5 at home whom he missed fiercely. He felt lost.Yeager had never seen a slot machine on a military base before—there weren’t any in the US—but he figured trying his luck couldn’t make things worse. “As I’m sitting there, the first…
Two U.S. Senators introduced the National Quantum Cybersecurity Migration Strategy Act, a bipartisan bill directing the White House Office of Science and Technology Policy to develop a coordinated national strategy for transitioning federal systems to post-quantum cryptography. The legislation builds on the National Quantum Initiative Act of 2018 and the 2022 Quantum Cybersecurity Preparedness Act, aiming to ensure federal systems are resilient against future quantum-enabled cyber threats. Brought in by Senators Gary Peters, a Michigan Democrat and Marsha Blackburn, a Tennessee Republican, the bill focuses on leading the development of a coordinated national strategy for transitioning federal systems to quantum-resistant…
Newark, United States, August 4th, 2025, CyberNewsWire Early Bird registration is now available for the inaugural OpenSSL Conference, scheduled for October 7–9, 2025, in Prague. The event will bring together leading voices in cryptography, secure systems, and open-source infrastructure. Early registrants can save up to $240 per ticket. Registration Information Registration packages are designed to reflect the diversity of the OpenSSL Communities, offering options for both essential access and extended participation. Seating is limited, and early registration, available until August 31, is strongly encouraged. Attendees can REGISTER NOW Featured Speakers & Programme Tracks Confirmed speakers include Daniel J. Bernstein, Research…
Citing national security concerns, the U.S. Department of Commerce last June 2024 issued an immediate ban on the sale of all antivirus software by Russia-based Kaspersky Lab, Inc. in the United States or to U.S. persons. This ban also applied to Kaspersky’s affiliates, subsidiaries and parent companies, as well as to security updates that keep its protection current. In its official statement, Kaspersky denied the allegations, proposing a “comprehensive assessment framework providing for the verification of its solutions, database updates, threat detection rules by an independent trusted reviewer.” The U.S., however, maintained the ban, warning that Kaspersky users had until…
I have pursued various certifications in cybersecurity, including CEH Master, ECIH, and CSA. While programs like CEH and ECIH are more hands-on and focused on ethical hacking and incident handling, the CTIA program provides a structured and comprehensive approach to threat analysis, intelligence gathering, and strategic security decision-making. This makes it particularly valuable for individuals with a strong interest in analytics and investigative methodologies, offering a distinct perspective on the dynamic and multifaceted landscape of threat actors. The CTIA program significantly enhanced my ability to analyze IOCs, correlate intelligence with adversary tactics, and proactively assess risks based on contextualized data.…
Cyera launched AI Guardian, a solution built to secure any type of AI. It expands Cyera’s platform to meet the needs of enterprises adopting AI at scale, anchored by two core products: AI-SPM, providing inventory on all AI assets at a granular level, and AI Runtime Protection, monitoring and responding to AI data risks in real-time. The launch comes as enterprises scale AI initiatives while facing new security and operational risks. According to Forrester, enterprises are expanding their use of AI, with 61% using genAI or genAI and predictive AI. In the last 12 months, 23% of enterprises have seen…