Author: HackWatchit

Former US Army member confesses to Telecom hack and extortion conspiracy Pierluigi Paganini July 16, 2025 A former US Army soldier pleaded guilty to hacking telecom databases, stealing data, and extorting companies by threatening to release the stolen info. A former Army soldier, Cameron John Wagenius (21) pleaded guilty to conspiring to hack telecom companies’ databases, steal sensitive records, and extort victims by threatening to release stolen data unless ransoms were paid. “A former Army soldier, who was most recently stationed in Texas, pleaded guilty today to conspiring to hack into telecommunications companies’ databases, access sensitive records, and extort the telecommunications companies…

UK retailer Co-op has confirmed that personal data of 6.5 million members was stolen in the massive cyberattack in April that shut down systems and caused food shortages in its grocery stores. Co-op (short for the Co-operative Group) is one of the United Kingdom’s largest consumer co-operatives, operating food stores, funeral services, insurance, and legal services. It is owned by millions of members who receive discounts on services and share in the company’s governance. Co-op’s CEO, Shirine Khoury-Haq, apologized today on the BBC Breakfast show, confirming that the attackers successfully stole the data for all of its 6.5 million members. “Their…

The research shows consolidation, mergers, and new disruptors like CrowdStrike are reshaping the SIEM landscape: “There’s an increasing number of younger SIEM vendors entering the market that can benefit from all the lessons learned during the 2010s and offer modern, lightweight, and often cloud-native solutions,” GigaOm states.  CrowdStrike stands out as the modern SIEM leader and innovator, validated across several key areas in the report. Relentless Innovation Drives SOC Transformation Falcon Next-Gen SIEM delivers “one of the most notable product launches in the market, especially following numerous mergers and acquisitions in 2024,” according to GigaOm. As organizations evolve to keep…

learning (RL) in AI model building has been a growing topic over the past few months. From Deepseek models incorporating RL mechanics into their training processes to other success stories of RL-based improvement, “AI Twitter” has been ablaze. As more agents get deployed, a question emerges: can reinforcement learning control systems be built only in prompts? After all, reinforcement learning is all about using real-world feedback to optimize toward a goal, traditionally by adjusting model weights. But prompts themselves are the primary interface for guiding large language models.  We’ve been experimenting with a new approach to optimizing LLM prompts that…

Non-profit organization MITRE announced Tuesday that it is preparing to release a significant update to ATT&CK Detection with its upcoming v18, expected in October this year. The update introduces a new approach to modeling how defenders detect adversary behavior across platforms, log sources, and behavioral chains. The update will transform ATT&CK detection guidance into a detection strategy-focused system, with modular, behavior-first blueprints that better address adversary behavior, platform diversity, and scalable detection. The new version will also feature three new STIX objects and versionable detection strategy blueprints, including Detection Strategies that map ATT&CK techniques to causal behavior chains, Analytics that…

What if your AI-powered application leaked sensitive data, generated harmful content, or revealed internal instructions – and none of your security tools caught it? This isn’t hypothetical. It’s happening now and exposing critical gaps in how we secure modern AI systems. When AI systems like LLMs, agents, or AI-driven applications reach production, many security teams.. The post Red Teaming AI Systems: Why Traditional Security Testing Falls Short appeared first on Security Boulevard.

World Liberty Financial (WLFI) token holders approved a governance proposal to make the WLFI token tradable, allowing the project to begin enabling transfers and secondary market access. Token holders cast overwhelmingly affirmative ballots before the July 16 close, with 11.1 billion tokens voting “Yes,” equivalent to 99.94%. World Liberty posted the “Make $WLFI Token Tradable” measure to its governance forum on July 4 and opened on‑chain voting on July 9. The proposal directs the team to activate transferability, allowing holders to move WLFI peer-to-peer and list on secondary venues, thereby shifting the network from a closed model to one of open participation. The plan…

Immersive announced its Immersive One AI-powered Lab Builder feature to give customers and partners new ways to improve cyber skills across teams through customized labs and learning experiences. With this new tool supporting Immersive’s Prove, Improve, Benchmark, and Report (PIBR) approach, cyber leaders will be able to create hands-on exercises and simulations for their technical workforce, including offensive, defensive, and secure-coding-based simulations to improve readiness against real-world threats. With the majority of cyber attacks involving the human element and costing global organizations an average of $4.88 million annually, the need to continuously prove and improve cyber capabilities has never been…

Unknown intruders are targeting fully patched end-of-life SonicWall Secure Mobile Access (SMA) 100 series appliances and deploying a novel, persistent backdoor / rootkit, analysts with Google’s Threat Intelligence Group (GTIG) have warned. The analysts say UNC6148 – as they dubbed the threat group – is likely financially motivated. “An organization targeted by UNC6148 in May 2025 was posted to the ‘World Leaks’ data leak site (DLS) in June 2025, and UNC6148 activity overlaps with publicly reported SonicWall exploitation from late 2023 and early 2024 that has been publicly linked to the deployment of Abyss-branded ransomware (tracked by GTIG as VSOCIETY),”…