Author: HackWatchit

BTC ATH MONTHLY, TRUMP SPOOKS MARKETS, ALTCOINS LEAD FALLSBitcoin records ATH monthly close then falls. Altcoins lead crypto sell-off after mixed earnings. SEC launches ‘Project Crypto’ to tokenise assets. Most crypto assets are not securities: Atkins. Strategy reports $10b profit despite funding costs. Coinbase earnings mixed, stock falls 10%. Coinbase to expand to tokenized RWAs, stocks. Tether announces Q2 profits of $4.9bn. ETH treasuries hit $10b+. ETH Foundation maps 10yr plan for 10k TPS. Stablecoins now 18th largest holder of US treasuries. Jamie Dimon endorses stablecoins but not BTC. Issuers submit amended S-1 for SOL ETF. Visa integrates EURC, PYUSD,…

Pi-hole, a popular network-level ad-blocker, has disclosed that donor names and email addresses were exposed through a security vulnerability in the GiveWP WordPress donation plugin. Pi-hole acts as a DNS sinkhole, filtering out unwanted content before it reaches the users’ devices. While initially designed to run on Raspberry Pi single-board computers, it now supports various Linux systems on dedicated hardware or virtual machines. The organization stated that they first learned of the incident on Monday, July 28, after donors began reporting that they were receiving suspicious emails at addresses used exclusively for donations. As explained in a Friday post-mortem, the…

In this Help Net Security video, Tom Cross, Head of Threat Research at GetReal Security, explores how generative AI is empowering threat actors. He breaks down three key areas: how GenAI lowers the technical barrier for attackers, enables highly convincing deepfake-driven social engineering, and allows threat actors to operate. Cross also raises important concerns about AI models becoming a new security surface, and how organizations can begin to assess and mitigate this emerging risk.

Small and medium-sized businesses (SMBs) developing or using artificial intelligence (AI) systems must comply with the European Union’s AI Act, even if they are not based in or have a presence in the bloc. Experts say that due to the Act’s scope, many U.S.-based SMBs could be affected and should take steps now to evaluate their exposure. This includes using AI to generate content that is accessed by EU citizens. A key deadline is Aug. 2, which marks the start of the enforcement of general-purpose AI governance rules. The first deadline, Feb. 2, pertained to “high-risk” AI systems and the…

Job searching can feel like dating — lots of promises and excitement upfront, but you don’t really know what you’re getting into until later. And with mass layoffs making headlines and budgets tightening across industries, many job seekers are asking “How do I know this company won’t just turn around and lay me off six months from now?” But it’s not only layoffs that you need to watch out for. Job seekers are equally worried about landing in a toxic workplace — the kind where communication is chaotic, expectations are unclear, or your time and well-being aren’t respected. It’s a…

Analysts from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and U.S. Coast Guard (USCG) conducted a threat hunt engagement at a critical infrastructure organization. During this hunt, CISA proactively searched for evidence of malicious activity or the presence of a malicious cyber actor on the customer’s network using host, network, ICS (industrial control system), commercial cloud, and open-source analysis tools. While reviewing IT–OT interconnectivity, CISA found the OT (operational technology) environment was misconfigured. Key findings included shared local admin accounts with identical plaintext passwords, poor network segmentation between IT and OT environments, and inadequate log retention and logging practices.…

ToolShell under siege: Check Point analyzes Chinese APT Storm-2603 Pierluigi Paganini August 01, 2025 Storm-2603 group exploits SharePoint flaws and uses a custom C2 framework, AK47 C2, with HTTP- and DNS-based variants named AK47HTTP and AK47DNS. Check Point Research is tracking a ToolShell campaign exploiting four Microsoft SharePoint flaws, linking it to China-nexus groups APT27, APT31, and a new cluster, Storm-2603. The researchers pointed out that Storm-2603’s goals remain unclear. Storm-2603 uses the AK47 C2 framework with two custom backdoors, respectively named AK47DNS and AK47HTTP. AK47DNS uses DNS queries to communicate with a fake C2 domain (update.micfosoft[.]com), encoding data via…

who are paying close attention to the media coverage of AI, particularly LLMs, will probably have heard about a few cases and trends around how people’s mental health can be affected by use or overuse of such technologies. In fact, the field of mental and behavioral health is rapidly exploring the ways that LLMs might be both useful and dangerous, in the mental health of the general population and in the diagnostic and treatment space. This is a complex space, and there’s a ton of research on the topic, so today I’m bringing a bit of an overview of some…

Mobile networks are facing a new cybersecurity headache as researchers reveal a new way attackers are bypassing SS7 protections. The research, detailed by the Enea threat intelligence titled “The Good, the Bad, and the Encoding,” explains how attackers are using encoding methods to bypass security and carry out exploits without being detected. SS7, or Signaling System 7, is the decades-old protocol that allows mobile carriers to connect calls, send text messages, and manage roaming between networks. While it underpins global telecommunications, it was never designed with modern security in mind. Despite ongoing efforts to patch and monitor SS7 traffic, attackers…