Author: HackWatchit

In brief Ethereum NFT collection Chimpers is expanding its brand into physical products. It is collaborating with IP incubator 223 on a plush keychain that comes with ties to digital experiences. The brand has amassed millions of followers across social media platforms. Long-running Ethereum NFT collection Chimpers is expanding its footprint, teaming with IP incubator 223 to produce physical collectibles, starting with a plush keychain blind box collection featuring the cartoonish Chimpers characters. The brand, which has amassed millions of followers across social media platforms, will sell its Series 1 collectible exclusively through 223’s online marketplace, with plans to expand into…

The move to 47-day SSL certificates is a major step toward a more secure, automated internet. While it introduces new challenges, especially for organizations relying on manual processes, it ultimately pushes the ecosystem toward greater resilience and trust.  The post The 47-Day SSL Certificate Era: What It Means for Site Owners and IT Teams appeared first on Security Boulevard.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday published four ICS (industrial control systems) advisories, delivering timely information about current security issues, vulnerabilities, and exploits. Hardware vulnerabilities were found in equipment from Hitachi Energy and Mitsubishi Electric deployed across the critical infrastructure sector. The agency encourages users and administrators to review newly released ICS advisories for technical details and mitigations. CISA disclosed in an advisory that Hitachi Energy Relion 670/650 and SAM600-IO series equipment used in the global energy sector contained an ‘improper check for unusual or exceptional conditions’ vulnerability. “An authenticated user with file access privilege via…

A phishing attack is one of the most prominent parts of the cyber kill chain used by a threat actor to obtain sensitive information and credentials or launch a ransomware attack. Depending on the nature, approach, and target, phishing is further classified into different attack types. One such threat is spear phishing, which leverages personal information to deceive individuals into revealing sensitive data. To understand phishing attacks in depth, EC-Council’s CyberTalks team reached out to Hadi Baltagi, a certified ethical hacker and prominent cybersecurity expert. Understand the different types of phishing, including deceptive phishing, spear phishing, whaling, smishing, and vishing,…

In this Help Net Security video, Ozan Ucar, CEO of Keepnet Labs, highlights a critical cybersecurity blind spot: the vulnerability of new hires during onboarding. He explains how attackers now use AI-powered, multi-channel phishing tactics to target fresh employees who are still unfamiliar with internal processes, faces, and norms. Ucar shares real-world examples, and practical, human-centric strategies to reduce risk and protect both employees and organizations from day one.

Brian Fehrman // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-Forward-What-You-Can Training Available live/virtual and on-demand

The notorious Hunters International ransomware-as-a-service operation has announced that it has shut down, in a message posted on its dark web leak site.In a statement on its extortion site, the ransomware group says that it has not only “decided to close the Hunters International project” but is also offering free decryption tools to its previous victims – with no ransom payment required.Hunters International does not give a specific reason for its closure, but says that the “significant decision” was made “after careful consideration and in light of recent developments.”What might those “recent developments” be?Well, the group had previously announced on…

Google fined $314M for misusing idle Android users’ data Pierluigi Paganini July 04, 2025 Google must pay $314M after a California court ruled it misused idle Android users’ data. The case ends a class-action suit filed in August 2019. A San Jose jury ruled that Google misused Android users’ cell phone data and must pay over $314.6 million in damages to affected users in California. Google is liable for collecting data from idle Android phones without consent, placing unfair costs on users for its own benefit. The class action, filed in 2019, represents around 14 million Californians and claims the…

Cisco, a leading networking hardware company, has issued an urgent security alert and released updates to address a severe vulnerability in its Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME). This critical flaw, identified as CVE-2025-20309, carries the highest possible severity rating, a CVSS score of 10.0, indicating it can be easily exploited with devastating consequences. Understanding the Threat The vulnerability stems from “static user credentials for the root account that are reserved for use during development,” as stated by Cisco in its advisory. In simpler terms, these systems were shipped with a…