Author: HackWatchit

Buy Now, Pay Later (BNPL) apps are everywhere these days. Whether you’re buying sneakers or groceries, chances are you’ve seen the option to split your payments over time. It’s quick and easy. But behind the convenience is a growing privacy concern that most users know little about. A new study from Incogni digs into just how much personal information BNPL apps collect and share. The research looked at eight of the most popular BNPL apps in the U.S. Google Play store, including Afterpay, Klarna, Affirm, and others. What it found was a pattern of aggressive data collection and sharing, with…

Here’s a look at the most interesting products from the past week, featuring releases from At-Bay, Immersive, NETSCOUT, Socure, and Stellar Cyber. Stellar Cyber 6.0.0 enhances automation, workflow intelligence, and user experience The 6.0.0 release builds on Stellar Cyber’s vision of delivering intelligent, efficient, and decisive security operations through automation, AI, and integration, all while remaining open, flexible, and accessible for security teams of any size or skill level. NETSCOUT Adaptive Threat Analytics improves incident response Adaptive Threat Analytics utilizes continuous network packet capture and local storage of metadata and packets independent of detections, built-in packet decodes, and a flexible…

TeleMessage SGNL, a made-in-Israel clone of the Signal app used by US government agencies and regulated businesses, has been found running with an outdated configuration that exposes sensitive internal data to the internet, no login required. The main cause of the problem is how some deployments of TeleMessage SGNL are using older versions of Spring Boot, a Java-based framework. These versions leave a diagnostic endpoint called /heapdump exposed by default. When not locked down, this endpoint returns a full memory snapshot of the app, weighing in at around 150MB. These dumps can contain usernames, passwords, session details, and other data…

As cyberattacks on industrial control systems (ICS) escalate, manufacturers and utilities are turning to Idaho National Laboratory’s immersive training programs to shore up their defenses. Known for its cyber escape rooms and hands-on simulations, INL has emerged as a global leader in preparing professionals to detect and disrupt threats to critical infrastructure. In partnership with the U.S. Cybersecurity and Infrastructure Security Agency (CISA), INL’s ICS 301 course trains participants to respond to real-world cyber incidents in high-stakes environments where safety and uptime are non-negotiable. “That briefcase with the digital countdown clock might not have an actual electromagnetic pulse device inside…

A critical Citrix NetScaler vulnerability, tracked as CVE-2025-5777 and dubbed “CitrixBleed 2,” was actively exploited nearly two weeks before proof-of-concept (PoC) exploits were made public, despite Citrix stating that there was no evidence of attacks. GreyNoise has confirmed its honeypots detected targeted exploitation from IP addresses located in China on June 23, 2025. “GreyNoise has observed active exploitation attempts against CVE-2025-5777 (CitrixBleed 2), a memory overread vulnerability in Citrix NetScaler. Exploitation began on June 23 — nearly two weeks before a public proof-of-concept (PoC) was released on July 4,” explains GreyNoise. “We created a tag on July 7 to track…

. Half a year is already behind us, although it seemed longer, given all the (AI) novelties. The expectations for AI developments were high for 2025, and a few top predictions that I followed up on at the end of 2024👇🏼: (1) “The future is agentic” (2) “Security will get tighter and tougher through — of course — AI” (3) “It will be the year of AI profit” Reflecting on last year’s AI prophecies and the new insights I’ve gained, it’s time for a brief retrospective on AI progress so far. The oracles were (somehow) right. While it’s fair to admit that AI agents…

Threat actors are using anti-box tools, AI, and cloaking-as-a-service tactics to bypass security tools by showing a phishing or other malicious site to targets and harmless ones to detection and blocking tools, techniques that SlashNext researchers say are reshaping how such scams are run. The post Emerging Cloaking-as-a-Service Offerings are Changing Phishing Landscape appeared first on Security Boulevard.

Ripple’s XRP surged to a new all-time high of $3.55 on July 17, climbing more than 36% over the past week and over 13% over the past 24 hours.The rally marked XRP’s first break above its 2018 peak and came amid a broader altcoin resurgence.The surge comes amid a wider altcoin rally led by Ethereum (ETH), which climbed 21% over the past week, while Solana (SOL) climbed 8% during the same period, fueled by growing adoption of blockchain infrastructure and renewed investor confidence in digital assets.Ripple’s institutional pushRipple Labs, the company behind XRP, has expanded its institutional footprint, securing partnerships…

Stormous Ransomware gang targets North Country HealthCare, claims 600K patient data stolen Pierluigi Paganini July 17, 2025 Ransomware group Stormous claims it stole data from 600,000 North Country HealthCare patients across 14 sites in northern Arizona. The Stormous ransomware gang claims it has stolen personal and health data belonging to 600,000 patients from health provider North Country HealthCare. North Country HealthCare is a nonprofit, federally qualified health center (FQHC) based in northern Arizona. It provides primary healthcare services to people of all ages across 14 locations in 11 communities. Their services include family medicine, pediatrics, prenatal care, behavioral health, dental…