Author: HackWatchit

[Article updated to add CISA quote at paragraphs 5, 6 and 7] A critical cybersecurity vulnerability affecting American train systems has gone unaddressed for over a decade, despite early warnings dating back to 2012. The issue, tied to End-of-Train (EoT) modules that transmit telemetry data wirelessly from the rear to the front of freight trains, was first identified by hardware security researcher Neils in 2012. He shared details last week on X, formerly Twitter, noting the risk emerged when software-defined radios (SDRs) became more accessible, allowing attackers to potentially intercept or spoof EoT communications. Yet for years, the Association of…

Remember well-heeled Manhattan resident Nicholas Truglia?Back in 2022, we told you how he had been sentenced to prison for his part in orchestrating a SIM swap scam that stole US $22 million in cryptocurrency.It was quite the downfall for the plucky scammer who on the day of the theft had allegedly bragged to his father and friends about how much cryptocurrency had been stolen, and offered to take them to the Super Bowl with “porn star escorts.”You may even recall the shock felt by many observers when Truglia was sentenced to just 18 months in prison, after stealing so much…

Today, I am incredibly proud to announce that with Cortex XDR, Palo Alto Networks has been named a Leader in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platforms for the third year in a row. We believe this recognition validates our unwavering commitment to delivering the world’s most effective AI-driven endpoint security to our customers. For us, it isn’t just about where we rank in the industry. It’s about setting a new standard for what security operations can achieve, while earning and maintaining the trust of the organizations that rely on us to protect them from increasingly sophisticated threats.…

F5 announced new tools to reduce the immense complexity cross-functional operations (XOps) teams face in managing hybrid, multicloud, and AI-driven application environments. F5 AI Assistant now provides a single natural language interface across F5 BIG-IP, F5 NGINX One, and F5 Distributed Cloud Services offerings to unify the user experience throughout the F5 Application Delivery and Security Platform (ADSP). As a new feature for the AI Assistant, F5 iRules code generation introduces a scalable, automated solution for teams at all levels of expertise to customize and program solutions for their specific environments. As organizations increasingly deploy distributed applications and adopt AI…

A new threat campaign is tricking Android users into downloading fake Telegram apps from hundreds of malicious domains, according to new research from BforeAI’s PreCrime Labs. The operation, active in recent weeks, uses lookalike websites, QR code redirections, and a modified APK laced with dangerous permissions and remote execution features. The threat intelligence team identified 607 domains linked to the campaign. All pose as official Telegram download pages, most registered through the Gname registrar and hosted in China. Some sites use domain names like teleqram, telegramapp, and telegramdl to mimic the brand, targeting users who may not notice slight spelling…

You don’t always need a vulnerable app to pull off a successful exploit. Sometimes all it takes is a well-crafted email, an LLM agent, and a few “innocent” plugins. This is the story of how I used a Gmail message to trigger code execution through Claude Desktop, and how Claude itself (!) helped me plan.. The post Code Execution Through Email: How I Used Claude to Hack Itself appeared first on Security Boulevard.

Standard Chartered has launched spot trading for Bitcoin (BTC) and Ethereum (ETH) through its institutional crypto platform, expanding its presence in digital assets just as U.S. regulatory and investor attention turns sharply toward stablecoins.The launch follows a series of high-level meetings across Washington, New York, and Boston, where Geoffrey Kendrick, the bank’s Head of Digital Assets Research, spent the week of July 7 to July 11 engaging with crypto-native firms, Bitcoin miners, funds, and policymakers.According to Kendrick, nearly 90% of the discussions centered on stablecoins, despite Bitcoin hitting new record highs.Regulatory tailwindsInterest in stablecoins has surged as the GENIUS Act,…

OpenAI’s image gen model, which is available via ChatGPT for free, now lets you easily create AI images even if you’re not familiar with trends or prompt engineering. Right now, if you want to create outstanding anime art, you need to come up with a very well-written prompt, and then ChatGPT will process your request. While prompt engineering is necessary, you might not always get the quality you’re expecting from the AI. GPT Styles Source: BleepingComputer.com To help you easily create images in different styles, ChatGPT has been quietly updated with a new ‘Style’ feature, which allows you to select…

Shopify has reportedly introduced rules governing merchants’ use of agentic artificial intelligence (AI). As Modern Retail reported Monday (July 14), the eCommerce platform has begun including a warning in the code powering merchant storefronts, establishing what these autonomous bots can and cannot do. “Automated scraping, ‘buy-for-me’ agents, or any end-to-end flow that completes payment without a final review step is not permitted,” the code said. The report said the change was noticed in the last few days and appears on Shopify storefronts, including Alo Yoga, Allbirds and Brooklinen. The change “doesn’t add or remove any rules for bots or agents,” Ilya Grigorik, Shopify’s distinguished engineer…