Author: HackWatchit

In brief A New York judge resentenced Nicholas Truglia to 12 years in prison after he failed to pay $20 million in restitution for a 2018 SIM-swap theft. The revised sentence more than doubles federal guidelines and follows Truglia’s early release from an initial 18-month term in 2022. Truglia evaded restitution while moving funds and buying luxury goods; a courtroom video of him boasting about hiding stolen crypto proved pivotal. A New York federal judge has resentenced convicted cybercriminal Nicholas Truglia to 12 years in prison, following an 18-month sentence years earlier, after he failed to pay $20 million in…

UK NCA arrested four people over M&S, Co-op cyberattacks Pierluigi Paganini July 10, 2025 NCA arrested four people in UK, including three teens, over cyberattacks on M&S, Co-op, and Harrods, per its investigation. The British National Crime Agency (NCA) arrested four individuals in the country following an investigation into the recent wave of attacks targeting Co-op, M&S, and Harrods. On July 10, Law enforcement arrested 4 youths, aged 17–20, in London and West Midlands, the police also seized their devices for evidence. One suspect is Latvian. “Four people have been arrested in the UK as part of a National Crime…

Sentrycs, a protocol-manipulation-based counter-drone technology provider, also known as Cyber over RF, announced today the release of Version 6.0 of its software suite. Developed in close coordination with operational teams in the field, this release brings upgrades across detection, mitigation, and the user interface. It addresses the growing need to protect wide and infrastructure-limited areas from unauthorized drone activity. A key advancement in the new version is the extension of the system’s mitigation range to a 10-kilometer diameter, to support existing customers with broader protection operations, including extended border protection, where expansion in both detection and mitigation range plays a…

Microsoft announced that it has replaced the default scripting engine JScript with the newer and more secure JScript9Legacy on Windows 11 version 24H2 and later. The decision is driven by security concerns, as JScript9Legacy is expected to offer better protection against web threats, such as cross-site scripting (XSS), and also improved performance. “To provide a more secure experience, beginning with Windows 11, version 24H2, JScript9Legacy is enabled by default to handle all scripting processes and operations that previously used JScript,” announced Microsoft’s Naveen Shankar. JScript (jscript.dll), introduced in 1996, is Microsoft’s implementation of ECMAScript, similar to JavaScript, and was primarily used…

MorganFranklin Cyber, a cybersecurity advisory firm, announced the promotion of two longtime leaders, Nick Stallone and Ferdinand Hamada, into newly created roles designed to support the firm’s strategic growth and client-centric mission. Stallone has been named Head of Strategy & Planning and Chief of Staff, a new leadership role focused on enabling cross-functional alignment and spearheading strategic initiatives, and helping drive associated go-to-market strategies across the business.  Within this role, Stallone will serve as a key facilitator of organizational strategic initiatives across pillar and sector leads, supporting execution, amplifying team ideas, and helping sustain the operational heartbeat of the organization.…

Major security flaw in McDonald’s AI hiring tool McHire exposed 64M job applications. Discover how an IDOR vulnerability and weak default credentials led to a massive leak of personal data and the swift remediation by Paradox.ai. A vulnerability in McHire, the AI-powered recruitment platform used by a vast majority of McDonald’s franchisees, exposed the personal information of over 64 million job applicants. The vulnerability, discovered by security researchers Ian Carroll and Sam Curry, allowed unauthorised access to sensitive data, including names, email addresses, phone numbers, and home addresses. The investigation began after reports surfaced on Reddit about the McHire chatbot,…

Claroty researcher Noam Moshe has discovered serious vulnerabilities in two Ruckus Networks (formerly Ruckus Wireless) products that may allow attackers to compromise the environments managed by the affected software, Carnegie Mellon University’s CERT Coordination Center (CERT/CC) has warned. The vulnerabilities have yet to be patched and it’s unknown when (or whether) they will be. The vulnerabilities Ruckus Networks is a subsidiary of American network infrastructure provider CommScope. It sells a variety of wired and wireless networking equipment and software. Its networking devices, CERT/CC says, are usually found at “venues where many end points will be connected to the internet, such…

a method to standardise communication between AI applications and external tools or data sources. This standardisation helps to reduce the number of integrations needed (from N*M to N+M):  You can use community-built MCP servers when you need common functionality, saving time and avoiding the need to reinvent the wheel every time. You can also expose your own tools and resources, making them available for others to use. In my previous article, we built the analytics toolbox (a collection of tools that might automate your day-to-day routine). We built an MCP server and used its capabilities with existing clients like MCP…

PerfektBlue Bluetooth attack allows hacking infotainment systems of Mercedes, Volkswagen, and Skoda Pierluigi Paganini July 10, 2025 Researchers found critical PerfektBlue flaws in OpenSynergy BlueSDK, allowing remote code execution to hack millions of vehicles’ systems. Researchers at PCA Cyber Security identified a set of critical vulnerabilities, collectively tracked as PerfektBlue, in OpenSynergy BlueSDK Bluetooth stack. The exploitation of the flaws potentially allows remote code execution in millions of vehicles. These flaws could enable attackers to hack car systems remotely. OpenSynergy’s BlueSDK is a Bluetooth implementation that is widely adopted in the automotive industry. It supports both Classic and Low Energy…