Author: HackWatchit

Customer names, email addresses, phone numbers, and shipping addresses were exposed across multiple e-commerce storefronts when attackers breached two third-party shopping applications. The cyberattack was confirmed when UK online spirits retailer Master of Malt notified its customers on September 18, 2026 of the risk to their personally identifiable information (PII). The following day, they informed customers that Master of Malt was not the target of the attack and that “The attack was against Ribon, which was installed on hundreds of BigCommerce stores.” In a September 2026 statement reported by BleepingComputer, e-commerce platform BigCommerce alerted merchants that unauthorized actors accessed shopper…

Many people ask: At what point do I bring in law enforcement during a cyber incident? When should I get outside help such as another consulting firm to support incident response? The honest answer is simple: before you ever need them. The best time to build reinforcements is not during a crisis. It is now.It’s the same idea as that old proverb: “The best time to plant a tree was 20 years ago. The second best time is now.” Cybersecurity works the same way. Incident response is messy, emotional, and chaotic. You don’t want to be flipping through your contacts…

In brief U.S. spot Bitcoin ETFs shed $643.2 million on Friday, their biggest outflow of October, in the first session after Thursday’s $6.4 billion Binance hack. Ethereum ETFs extended a five-day outflow streak to about $431 million, and Solana ETFs lost about $72 million over the week. Bitcoin fell about 4% Friday before steadying near $77,520 Saturday, while Myriad traders turned bearish on Ethereum and Solana. The first real test of how ETF investors would react to the largest crypto hack in history came back red.U.S. spot Bitcoin ETFs shed $643.2 million on Friday, according to Decrypt’s ETF tracker, their…

Northstar Security, a startup developing AI agents for security teams, has emerged from stealth mode with $7 million in seed funding. Wing Venture Capital led the round. MVP, Outliers, and cybersecurity veterans Gerhard Eschelbeck, Renaud Deraison, and Justin Somaini also invested. The company ingests data from existing security and IT tools to build what it calls a Security Context Graph. Updated in real time, the graph shows how identities, assets, applications, vulnerabilities, and business systems connect to one another. Northstar aims to catch so-called toxic combinations. Issues such as a vulnerability, an unmanaged device, or an account with excessive privileges…

FBI Blames North Korea for $6 Billion Binance Crypto Theft Pierluigi Paganini November 01, 2026 The FBI blames North Korea for stealing $6 billion from Binance and urges crypto firms to block transactions linked to the stolen funds. The FBI has named North Korea as the party behind the theft of more than $6 billion in virtual assets from the crypto exchange Binance, on or about October 29, 2026. The bureau published its findings in a public alert. The FBI specifically blames the North Korea-linked APT “TraderTraitor,” also tracked as Lazarus Group and APT38. Binance hasn’t named a culprit, but…

Fairness, transparency, accountability, privacy, safety and human oversight are core responsible AI principles. That means AI systems must be designed to avoid bias, clearly explain their decision-making processes, protect users’ data, ensure security and maintain an overall sense of accountability to humans throughout all development, deployment and monitoring stages.

AI is pushing data center traffic to levels most security architectures were never built for, and much of it is encrypted. Today we’re introducing the Check Point Maestro Hyperscale Orchestrator (MHO) 200, our most powerful Maestro orchestrator yet. With new 400GbE ports and four times the capacity, it lets organizations secure AI traffic without slowing it down. Why Is AI Traffic So Hard to Secure in the Data Center? Training, inference, and agentic workloads are driving up both perimeter and east-west traffic fast. A significant share of that traffic is encrypted, and all of it needs inspection, while AI services…

OmniTrust announced the launch of GridAuth, a device identity and trust management platform for energy utilities and equipment manufacturers deploying secure Wi-SUN Field Area Networks (FAN), Advanced Metering Infrastructure (AMI), and connected-grid infrastructure.  The announcement coincides with the Wi-SUN Alliance Fall Members Meeting in North Carolina. Energy utilities are managing increasingly complex networks of smart meters, routers, gateways, and other connected devices, often supplied by multiple manufacturers and expected to remain deployed for decades. As these networks expand, so do the cybersecurity risks and regulatory demands surrounding critical infrastructure protection and supply chain security. Establishing trusted device identities at manufacturing…

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Just one of the weaknesses patched this week is considered a “zero day,” or already exploited in the wild. CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows 10 and 11 systems, as well as some Server versions. Windows 10 users might be wondering if they can still expect security updates after this…