Author: HackWatchit

CrowdStrike’s Falcon platform is a cloud-native, AI-powered platform that protects customers through a combination of on-device prevention engines and real-time intelligence from the CrowdStrike Security Cloud. Our detection capabilities are continuously enhanced via configuration updates, not definition files, delivered with precision and validated for accuracy.  Our customers have always had control over when and how their Falcon sensor versions are updated. But after July 19, we understood that customers wanted even more control over how and when security configuration updates are applied to their environments. What started as an immediate response to customer feedback has evolved into something more significant…

Elon Musk’s Grok-4 AI was compromised within 48 hours. Discover how NeuralTrust researchers combined “Echo Chamber” and “Crescendo” techniques to bypass its defences, exposing critical flaws in AI security. Elon Musk’s new artificial intelligence, Grok-4, was compromised only two days after its release by researchers at NeuralTrust. Their findings, detailed in a NeuralTrust report published on July 11, 2025, revealed a novel approach that combined Echo Chamber and Crescendo techniques to evade the AI’s built-in safeguards. This allowed them to extract directions for creating dangerous items like Molotov cocktails. The research team, led by Ahmad Alobaid, discovered that merging different…

Hackers have adopted the new technique called ‘FileFix’ in Interlock ransomware attacks to drop a remote access trojan (RAT) on targeted systems. Interlock ransomware operations have increased over the past months as the threat actor started using the KongTuke web injector (aka ‘LandUpdate808’) to deliver payloads through compromised websites. This shift in modus operandi was observed by researchers at The DFIR Report and Proofpoint since May. Back then, visitors of compromised sites were prompted to pass a fake CAPTCHA + verification, and then paste into a Run dialog content automatically saved to the clipboard, a tactic consistent with ClickFix attacks. The trick led users to execute a…

Authored by Dexter Shin McAfee’s Mobile Research Team discovered a new and active Android malware campaign targeting Bengali-speaking users, mainly Bangladeshi people living abroad. The app poses as popular financial services like TapTap Send and AlimaPay. It is distributed through phishing sites and FacebookFacekbook pages, and the app steals users’ personal and financial information. The campaign remains highly active, with the command-and-control (C2) server operational and connected to multiple evolving domains. While the attack techniques are not new, the campaign’s cultural targeting and sustained activity reflect how cybercriminals continue to adapt their strategies to reach specific communities. McAfee Mobile Security…

we, data scientists, cite the most — but also the most misleading. It was long ago that we found out that models are developed for far more than just making predictions. We create models to make decisions, and that requires trust. And relying on the accuracy is simply not enough. In this post, we’ll see why and we’ll check other alternatives, more advanced and tailored to our needs. As always, we’ll do it following a practical approach, with the end goal of deep diving into evaluation beyond standard metrics. Here’s the table of contents for today’s read: Setting Up the…

An attacker using a $500 radio setup could potentially trigger train brake failures or derailments from a distance Pierluigi Paganini July 15, 2025 A 20-year-old flaw in End-of-Train and Head-of-Train systems could let hackers trigger emergency braking, finally getting proper attention. US CISA has warned about a critical flaw, tracked as CVE-2025-1727, in the radio-based linking protocol between End-of-Train (EoT) and Head-of-Train (HoT) systems. An End-of-Train (EoT) device, also known as a Flashing Rear End Device (FRED), is a wireless system attached to the last car of a freight train. An EoT device monitors and transmits key data to the…

Marko Elez, a 25-year-old employee at Elon Musk’s Department of Government Efficiency (DOGE), has been granted access to sensitive databases at the U.S. Social Security Administration, the Treasury and Justice departments, and the Department of Homeland Security. So it should fill all Americans with a deep sense of confidence to learn that Mr. Elez over the weekend inadvertently published a private key that allowed anyone to interact directly with more than four dozen large language models (LLMs) developed by Musk’s artificial intelligence company xAI. Image: Shutterstock, @sdx15. On July 13, Mr. Elez committed a code script to GitHub called “agent.py”…

Trevor Koverko’s journey began on the ice. In 2005, he was drafted by the NHL’s New York Rangers—an early milestone that reflected his discipline, grit, and high-performance mindset. But everything changed in 2011. While driving on Toronto’s 401 highway to a business meeting, Trevor was involved in a devastating car accident with a transport truck. He was airlifted to Hamilton Health Sciences Centre with a brain hemorrhage, contusions, lacerations, and severe trauma to his parietal lobe. He remained in a coma for days and faced temporary paralysis on his left side. It could have ended there. But as Trevor describes…

Artificial intelligence, the unsung hero of modern cyber security, works tirelessly to protect our digital world. While AI’s creative capabilities are well-known, its most critical role is safeguarding data, privacy, and infrastructure from sophisticated cyber threats. As Albert Einstein wisely said, “We cannot solve our problems with the same thinking we used when we created them.” This wisdom is especially true in cyber security, where traditional defense methods struggle against rapidly evolving threats. AI emerges as the adaptive, intelligent solution needed to stay ahead of cyber criminals who are weaponizing AI. The Evolution of Cyber Threats in this AI Era…