Author: HackWatchit
U.S. cyber agencies, the FBI, and NSA issued an urgent warning today about potential cyberattacks from Iranian-affiliated hackers targeting U.S. critical infrastructure. CISA says there are no indications of an ongoing campaign but urges critical infrastructure organizations and other potential targets to monitor their defense due to the current unrest in the Middle East and cyber attacks previously linked to Iran. In a joint fact sheet, the cyber agencies warn that Defense Industrial Base (DIB) companies with ties to Israeli defense and research, are at increased risk at being targeted. Other organizations in critical infrastructure sectors, including energy, water, and healthcare, are…
U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 30, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Citrix NetScaler vulnerability, tracked as CVE-2025-6543, to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2025-6543 (CVSS score of 9.2) is a memory overflow vulnerability in NetScaler ADC and NetScaler Gateway when configured as a Gateway (e.g., VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. “Memory overflow vulnerability leading to unintended control flow and Denial of Service…
Hong Kong, a key international financial hub, is confronting increasingly sophisticated cyber threats that demand strong cyber resilience to protect its financial stability and economic operations. The dependence on digital platforms by essential infrastructure providers increases the potential impact of cyber attacks. To address this evolving threat landscape, the Hong Kong Monetary Authority (HKMA) launched the Cybersecurity Fortification Initiative (CFI) in 2016. This program aims to strengthen the cyber defenses of the banking industry and is built upon three main components: the Cyber Resilience Assessment Framework (C-RAF), the Professional Development Programme (PDP), and the Cyber Intelligence Sharing Platform (CISP). Acknowledging…
As ubiquitous as mobile devices have become for federal users, agencies still need to maintain a mobile-first mindset as they modernize infrastructure and applications. That’s especially true as artificial intelligence comes into the picture and security concerns grow more intense, said Mark Clancy, senior vice president for cybersecurity at T-Mobile. “It’s cloud and mobile meet AI,” Clancy said during Federal News Network’s Industry Exchange Data 2025. “It’s all about pervasive connectivity, working from anywhere — whether in the office or on the go — but also keeping everything secure.” He added, “You must always have security running and always present.”…
Spanish authorities arrested five members of a criminal network responsible for laundering €460 million stolen through global cryptocurrency investment fraud schemes. Source: Europol The operation, led by the Guardia Civil with support from Europol and law enforcement in Estonia, France, and the United States, uncovered that more than 5,000 victims worldwide were defrauded. The action day led to: 5 arrests (3 on the Canary Islands and 2 in Madrid), and 5 searches (3 on the Canary Islands and 2 in Madrid). Global network enabled crypto fraud The criminal network is suspected of laundering funds through a complex web of corporate…
Gail Menius // Once upon a time, in a land not too far away (about two miles from where I’m sitting now) I used to be an elementary school librarian. The kids and I used to read books together…look for books in the library together. We would even explore the internet together. When they got to be about eight years old, I would teach them how to make passwords for our learning management system. I used to use the curriculum on CommonSenseMedia, here is a lesson plan for k-2: https://www.commonsensemedia.org/educators/lesson/powerful-passwords-k-2. The scope and sequence for common sense media…
Palo Alto, California, June 30th, 2025, CyberNewsWire Every security practitioner knows that employees are the weakest link in an organization, but this is no longer the case. SquareX’s research reveals that Browser AI Agents are more likely to fall prey to cyberattacks than employees, making them the new weakest link that enterprise security teams need to look out for. Browser AI Agents are software applications that act on behalf of users to access and interact with web content. Users can instruct these agents to automate browser-based tasks such as flight bookings, scheduling meetings, sending emails, and even simple research tasks.…
REX Shares spot Solana staking exchange-traded fund (ETF) is poised to become the first SOL ETF to begin trading in the United States, potentially as early as this week.Bloomberg senior ETF analyst Eric Balchunas said on June 28 that the company’s latest filing with the U.S. Securities and Exchange Commission (SEC) indicates it is ready to go live.He wrote:“Rex also filed an updated prospectus, which totally filled in. Add it all up and it appears as though all systems go for imminent launch.”Additionally, he shared a screenshot of an internal email suggesting the SEC’s comments have been addressed. He said:“So…
Agents with the Federal Bureau of Investigation (FBI) briefed Capitol Hill staff recently on hardening the security of their mobile devices, after a contacts list stolen from the personal phone of the White House Chief of Staff Susie Wiles was reportedly used to fuel a series of text messages and phone calls impersonating her to U.S. lawmakers. But in a letter this week to the FBI, one of the Senate’s most tech-savvy lawmakers says the feds aren’t doing enough to recommend more appropriate security protections that are already built into most consumer mobile devices. A screenshot of the first page…