Author: HackWatchit

The notorious cybercrime and hacker platform BreachForums has mysteriously resurfaced on its original dark web .onion domain. The site appears to be fully restored, including its infrastructure, user-leaked databases, official breach listings and forum posts. For your information, in early April 2025, both the clearnet and dark web domains of BreachForums went offline without explanation. Members speculated about possible law enforcement action or a forum seizure. Then, on April 28, as reported by Hackread.com, the forum’s homepage was replaced with a message stating that a MyBB 0-day vulnerability had left the site exposed to infiltration attempts by law enforcement, and…

Intruder this week made available an open-source tool that scans application programming interfaces (APIs) for broken authorization vulnerabilities. The post Intruder Open Sources Tool for Testing API Security appeared first on Security Boulevard.

In my previous piece about Bitcoin’s hard fork mechanism as the ultimate “code red button”, I explored how decentralized networks preserve the community’s power to choose a different path when existing structures no longer serve their interests. Today, I want to extend that metaphor beyond cryptocurrency into the realm of constitutional governance, where ordinary citizens possess similar, yet often forgotten, powers to reshape the very foundations of their political systems. The Deadlock Dilemma – When Constitutional Constraints Bind National Interest As I write this, I find myself in the eye of a governance storm that perfectly illustrates the limitations of…

Executive Summary Since the creation of the internet, email attacks have been the predominant attack vector for spreading malware and gaining initial access to systems and endpoints. One example of an effective email compromise technique is a homograph attack. Attackers use this content manipulation tactic to evade content analysis and trick users by replacing Latin characters with similar-looking characters from other Unicode blocks. This article provides rare insights into real homograph attacks, and demonstrates the full chain of events that can potentially lead to exploitation of targets. We outline three cases that we detected in the wild. In each scenario,…

A U.S. senator has now contacted Mandiant to determine whether Verizon Communications and AT&T have fully removed the cyber espionage group known as Salt Typhoon from their networks. Maria Cantwell sent letters to both telecom providers requesting documentation on their response efforts. In reply, each company confirmed that Mandiant had been brought in to conduct a comprehensive assessment and verify the incident’s containment. Mandiant is now being asked to produce documents detailing its findings and actions related to the breach. Cantwell, a Washington Democrat and ranking member of the Senate Commerce, Science, and Transportation Committee, wrote this week to Sandra…

It’s been six months since the EU’s Digital Operational Resilience Act (DORA) came into effect, but a new Censuswide survey shows that nearly all financial services organizations in EMEA still feel unprepared. An overwhelming 96% of respondents said their current level of data resilience isn’t where it needs to be. The survey, which gathered input from senior IT decision-makers in the UK, France, Germany, and the Netherlands, paints a clear picture: financial institutions are still struggling to meet the demands of DORA, the EU’s new framework designed to help the industry defend against cyberthreats and IT disruptions. While DORA has…

This article is an excerpt from my upcoming book about how data scientists can not just survive the AI wave, but use it to level up their careers. If you’d like to hear when it’s ready, please join the waitlist here! that junior and even mid-level data scientists take pride in—the stuff that makes them feel smart, technical, and irreplaceable—is now baseline automation. The uncomfortable question isn’t whether AI can do these things as good as a human, it’s whether a human is still adding value by doing them himself. AI is already good enough for most of the routine…

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned three North Korean nationals and a company for supporting fraudulent IT worker schemes that generated illicit revenue for the Democratic People’s Republic of Korea (DPRK) government. The sanctioned company is named Korea Sobaeksu Trading Company, and the three North Korean individuals are Kim Se Un, Jo Kyong Hun, and Myong Chol Min. North Korea’s IT worker schemes involve placing skilled tech workers in American companies using fake or stolen identities to get the job. The workers’ earnings are then funneled to the DPRK regime to fund…

Koske, a new AI-Generated Linux malware appears in the threat landscape Pierluigi Paganini July 25, 2025 Koske is a new Linux malware designed for cryptomining, likely developed with the help of artificial intelligence. Koske is a new Linux AI-generated malware that was developed for cryptomining activities. Aquasec researchers reported that the malicious code uses rootkits and polyglot image file abuse to evade detection. Attackers exploit a misconfigured server to drop backdoors and download two JPEG polyglot files via shortened URLs. The images are polyglot files that hide malicious code appended at the end and execute directly in memory to evade…