Author: HackWatchit

Notepad now lets you use markdown text formatting on Windows 11, which means you can write in Notepad just like you could in WordPad. The new formatting feature is turned on by default, and you just need to select one of the options in the new formatting toolbar. For example, when you highlight one of the lines in Notepad and choose your preferred heading, Notepad will instantly apply that formatting. You can use a heading, a subheading, or a body tag. That’s up to you. You can also use bullet points, including numbered bullet points. You can keep using formatting…

A concept long theorized in research labs and sci-fi novels, the spatial internet is now entering a critical phase of execution. Mawari, a decentralized content delivery platform building for immersive XR experiences, has announced two important milestones. One is the end of its XR Chip claim program. The other is surpassing one million portal users. Together, they hint that the infrastructure of a new kind of internet, one based on real-time, immersive, and decentralized interaction, is quietly taking shape. A Controlled Entry Point to a New Ecosystem On July 6, 2025, Mawari posted on its official X account: “XR Chip…

If the analysis by researchers at CyberNews is on point, then a massive breach, involving 16 billion records previously slipped under the radar and represents the largest of its kind so far.  The post 16 Billion Exposed Records Offer Blueprint for Mass Exploitation  appeared first on Security Boulevard.

In this Help Net Security interview, John Morello, CTO at Minimus, discusses the security risks in AI-driven development, where many dependencies are pulled in quickly. He explains why it’s hard to secure software stacks that no one fully understands. He also shares what needs to change to keep development secure as AI becomes more common. We’re seeing AI-assisted development pull in hundreds of dependencies from diverse sources at speed. From your perspective, what’s the most urgent security challenge this creates in practice? In many ways, this isn’t really a new problem. Over the past decade or so, development practices have…

Intel 471’s latest intelligence update for July reveals a surge in sophisticated cyber campaigns carried out by advanced persistent threat (APT) groups across the globe in June. These operations point to a shifting threat landscape where espionage and disruption are growing in both scale and impact. “The Silver Fox APT focused on Taiwan, employing spear-phishing and leveraging RATs like Gh0stCringe and HoldingHands to infiltrate government and tech networks, aiming to steal intellectual property,” researchers detailed in Intel 471’s Intelligence & Research Cyber Threat Updates. “Concurrently, remnants of the dismantled Black Basta group resurfaced under affiliations like CACTUS and BlackSuit, targeting…

Current Status: – MS15-034 has remote Denial of Service (DoS) – Remote exploit code appears to be ready soon… maybe.  Stay tuned. BLUE TEAM MARCHING ORDERS: – Patch. Now. Please. – Pay *very* careful attention to your IIS logs for systems that are attacking or attempting the DoS.  You are being profiled.  Vulnerable servers will be the targets of attacks once working exploit code is released. RED TEAM MARCHING ORDERS: – Keep your eyes and ears open. – Help explain the risks to folks in your org who don’t get the gravity of this. Details: Despite a poor reputation for…

A series of malicious apps and stealthy spyware is targeting Android users worldwide, with new data showing how cybercriminals keep finding ways to slip threats onto devices and even official app stores. According to new findings from Dr.Web Security Space, adware is still the most common threat on mobile devices, but what is noticeable this time is how attackers keep finding new tricks to spread it. Adware Still Tops the Charts Adware Trojans continued to dominate, led by the Android.HiddenAds family. Although detections dropped by just over 80%, HiddenAds variants are still the most active group, often masquerading as harmless…

U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 07, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Chromium V8 vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Chromium V8 vulnerability, tracked as CVE-2025-6554, to its Known Exploited Vulnerabilities (KEV) catalog. Last week, Google released security patches to address the Chrome vulnerability CVE-2025-6554 for which an exploit is available in the wild. “Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.…

United States Customs and Border Protection (CBP) is asking tech companies to pitch digital forensics tools that are designed to process and analyze text messages, pictures, videos, and contacts from seized phones, laptops, and other devices at the United States border, according to documents reviewed by WIRED.The agency said in a federal registry listing that the tools it’s seeking must have very specific capabilities, such as the ability to find a “hidden language” in a person’s text messages; identify specific objects, “like a red tricycle,” across different videos; access chats in encrypted messaging apps; and “find patterns” in large datasets…