Author: HackWatchit

Health and Human Services Secretary Robert F. Kennedy Jr. recently announced that he wants “every American wearing a health monitoring device within four years.” His department plans to launch “one of the biggest campaigns in HHS history” to promote wearables as affordable alternatives to expensive medications. While the health benefits may seem appealing, this federal push toward ubiquitous biometric monitoring highlights a broader digital privacy crisis that cybersecurity practitioners witness daily – the systematic erosion of personal data protection across all connected devices and services. Kennedy’s wearables initiative represents just the latest example of how convenience-focused technology adoption often overlooks…

What to know about a vulnerability being exploited on Microsoft SharePoint servers Microsoft is issuing an emergency fix to close off a vulnerability in Microsoft’s SharePoint software that hackers have exploited to carry out widespread attacks… The Associated Press July 21, 2025 8:29 pm 3 min read NEW YORK (AP) — Microsoft has issued an emergency fix to close off a vulnerability in Microsoft’s widely-used SharePoint software that hackers have exploited to carry out widespread attacks on businesses and at least some U.S. government agencies. The company issued an alert to customers Saturday saying it was aware of the zero-day…

Can Bitcoin DeFi Finally Scale Without Compromising on Security? Bitcoin, the world’s largest and most secure blockchain, has historically struggled to support smart contracts and complex financial applications. Despite its dominance as a store of value, Bitcoin has largely remained isolated from the innovation happening on Ethereum and other programmable blockchains. But what if Bitcoin could support DeFi, natively, without wrapping, bridging, or compromising on decentralization? This is the challenge that Maestro, a Bitcoin infrastructure company, is tackling by building a native Ordinals and Runes indexer on the Internet Computer Protocol (ICP). With funding from the DFINITY Foundation, the company…

The other day I was walking around Oslo when I passed a fancy building with a red carpet, black awning and a name in big capital letters: Hotel Bristol. I was mystified. Bristol? In Oslo? Well, it turns out that the Hotel California is in Paris, that the Manhattan Hotel is in Jakarta and that the Hotel Vienna exists pretty much everywhere except in Vienna. I thought it would all come down to marketing. But the more I explored, the more I saw three stories unfolding: location, aspiration, and old-world tradition. Follow along for a fun data analysis into the…

CrushFTP zero-day actively exploited at least since July 18 Pierluigi Paganini July 22, 2025 Hackers exploit CrushFTP zero-day, tracked as CVE-2025-54309, to gain admin access via HTTPS when DMZ proxy is off. Threat actors are exploiting a zero-day vulnerability, tracked as CVE-2025-54309 (CVSS score of 9.0), in the managed file transfer software CrushFTP to gain administrative privileges on vulnerable servers via HTTPS. CrushFTP warned of a zero-day that has been exploited since July 18 via HTTPS. Attackers reversed old code to exploit a bug patched in recent versions before July 1. “July 18th, 9AM CST there is a 0-day exploit…

Hackers with ties to the Chinese government have been linked to a recent wave of widespread attacks targeting a Microsoft SharePoint zero-day vulnerability chain. They used this exploit chain (dubbed “ToolShell”) to breach dozens of organizations worldwide after hacking into their on-premise SharePoint servers. “We assess that at least one of the actors responsible for this early exploitation is a China-nexus threat actor. It’s critical to understand that multiple actors are now actively exploiting this vulnerability,” Charles Carmakal, CTO of Google Cloud’s Mandiant Consulting, told BleepingComputer. “We fully anticipate that this trend will continue, as various other threat actors, driven…

Data breaches seem to pop up in the news every other week, so it’s no surprise that keeping sensitive information safe has jumped to the top of the priority list for just about every industry. Hardware-encrypted drives like the iStorage diskAshur PRO3 address this need by offering physical security combined with convenience and flexibility. I’ve been trying out the 2TB SSD version of the diskAshur PRO3 to see how it holds up in everyday use. Design and build The drive arrives in a box with a security seal, containing a compact carry case, USB Type-C and Type-A cables, and a…

Defending Against This Threat Organizations are strongly encouraged to apply patches that have been released to ensure they are protected. At the time of writing, patches for Microsoft SharePoint Server 2019 Core and Microsoft SharePoint Server Subscription Edition are currently available. Patches for Microsoft SharePoint Enterprise Server 2016 were still being actively tested by Microsoft.  CrowdStrike Falcon Endpoint Detection and Response As mentioned in our opening analysis, this attack relies on specially crafted POST requests to exploit the SharePoint zero-day vulnerabilities. CrowdStrike Falcon® Insight XDR endpoint security successfully detected and blocked these attacks through advanced behavioral analysis rather than relying…

Menlo Park, United States, July 21st, 2025, CyberNewsWire “Innovator and Leader in AI Security”  AccuKnox was given the #1 AI Security Startup of 2025 Award by EmergeX: Unveiling Innovation at the influential BSides Bangalore Cybersecurity Conference in Bangalore. AccuKnox presented its Agentic AI runtime security solution. The competition judges were very accomplished CyberSecurity leaders and voted AccuKnox as the leading innovator. The unique and highly differentiated innovation in the area of AI Agentic Security positions AccuKnox ahead of established industry incumbents in addressing a vexing problem in AI Technology Adoption. The recognition positions AccuKnox as the platform leader and innovator…