Author: HackWatchit

Palo Alto, California, July 29th, 2025, CyberNewsWire Despite the expanding use of browser extensions, the majority of enterprises and individuals still rely on labels such as “Verified” and “Chrome Featured” provided by extension stores as a security indicator. The recent Geco Colorpick case exemplifies how these certifications provide nothing more than a false sense of security – Koi Research[1] disclosed 18 malicious extensions that distributed spyware to 2.3M users, with most bearing the well-trusted “Verified” status. SquareX researchers disclosed the technological reason behind this vulnerability, highlighting an architectural flaw in Browser DevTools that prevents browser vendors and enterprises from performing…

The Tea app data breach has grown into an even larger leak, with the stolen data now shared on hacking forums and a second database discovered that allegedly contains 1.1 million private messages exchanged between the app’s members. The Tea app is a women-only dating safety platform where members can share reviews about men, with access to the platform only granted after providing a selfie and government ID verification. On Friday, an anonymous user posted on 4chan that Tea used an unsecured Firebase storage bucket to store drivers’ licenses and selfies uploaded by members to verify they are women, as well…

Cleaning products giant Clorox has sued its IT services partner, Cognizant, alleging that a devastating August 2023 ransomware attack that crippled production and cost the company $380 million in lost revenue was due to the firm’s negligence. In a California Superior Court lawsuit, Clorox claims hackers linked to the Scattered Spider group simply obtained credentials by phoning Cognizant’s service desk for a password reset. Clorox further alleges Cognizant botched its response, prolonging the recovery time. Now, Specops Software, a security analysis firm, published a detailed analysis of this incident, revealing precisely how this straightforward service desk attack unfolded and offering…

In brief CoinDCX CEO Sumit Gupta denied reports that Coinbase is in talks to acquire the exchange, calling the claims “rumors.” The news comes after CoinDCX was hacked for $44.2 million hack on July 18, prompting the exchange to launch a bounty program. Coinbase, already FIU-registered in India, is eyeing deeper expansion as it allegedly considers consolidating investments in CoinDCX and rival CoinSwitch. Indian crypto exchange CoinDCX is not for sale, at least according to co-founder and CEO Sumit Gupta, who shot down claims that crypto giant Coinbase is in advanced talks to acquire the exchange.Gupta took to X on…

After the United Kingdom’s Online Safety Act went into effect on Friday, requiring porn platforms and other adult content sites to implement user age verification mechanisms, use of virtual private networks (VPNs) and other circumvention tools spiked in the UK over the weekend.Experts had expected the surge, given that similar trends have been visible in other countries that have implemented age check laws. But as a new wave of age check regulations debuts, open internet advocates warn that the uptick in use of circumvention tools in the UK is the latest example of how an escalating cat-and-mouse game can develop…

Cyware expanded its Cyware Intelligence Suite, an enhanced threat intelligence program-in-a-box that consolidates threat management capabilities into a streamlined, logical workflow. The expansion enables security teams to operationalize threat intelligence more easily and improve security posture faster. The Cyware Intelligence Suite addresses the complexities of launching and maintaining a Cyber Threat Intelligence (CTI) program by streamlining deployment, enrichment, and operationalization. Built on Cyware Intel Exchange, the solution now includes three powerful new components: Cyware Sandbox Service, Cyware Sectoral Feeds, and Domain Sightings, in addition to already available Compromised Credential Management, Team Cymru Threat Feeds, and a collection of pre-configured integration,…

Cydome announces the launch of a free cyber-incident reporting tool, coinciding with the introduction of new federal enforcement rules for U.S. maritime operators. With U.S. Coast Guard regulations now in effect as of July 16, shipowners and offshore operators are required to report cyber incidents, marking the start of a more aggressive regulatory posture. By simply registering, Cydome’s tool aims to give operators immediate compliance support as they become federally required to report cyber incidents under U.S. law. Thus, providing an immediate, accessible way to meet these compliance demands and avoid potential penalties. Cydome data shows that roughly every three…

Seychelles Commercial Bank Reported Cybersecurity Incident Pierluigi Paganini July 29, 2025 Seychelles Commercial Bank on Friday said it had recently identified and contained a cybersecurity incident. A hacker claims to have stolen and sold the personal data of clients of Seychelles Commercial Bank. The bank, which provides personal and corporate services on Seychelles, one of the world’s smallest countries, notified customers of a hack, but said only personal information – not money – was stolen. Seychelles Commercial Bank on Friday said it “recently identified and contained a cybersecurity incident, which has resulted in its internet banking services being temporarily suspended,”…

In this Help Net Security interview, Seth Ruden, Senior Director of Global Advisory at BioCatch, discusses how financial institutions are addressing fraud. He explains how banks are using behavioral biometrics, device fingerprinting, and network intelligence to enhance fraud prevention. Ruden talks about how fraud prevention is moving beyond rules-based systems toward risk-scoring models and graph-based anomaly detection, and points out how scam playbook simulations and red teaming help strengthen financial institutions’ defenses. Have you seen an uptick in cross-channel fraud (e.g., social media scams leading to fraudulent banking transactions), and how are banks responding to these blended threats? Absolutely. While…