Author: HackWatchit

Imagine a world where today’s encryption, the very foundation of digital trust, can be unraveled in seconds. This isn’t science fiction – it’s the promise and peril of quantum computing. Quantum technology, once confined to theory, is rapidly advancing and reshaping what we know about cybersecurity. While its applications could transform industries from healthcare to finance, its power to break conventional cryptography poses a stark challenge to the security systems we rely on. As quantum technology matures, the race is on for CISOs and IT security professionals to secure a future where quantum-powered threats are a reality. The question isn’t…

The Biden administration considered spyware used to hack phones controversial enough that it was tightly restricted for US government use in an executive order signed in March 2024. In Trump’s no-holds-barred effort to empower his deportation force—already by far the most well-funded law enforcement agency in the US government—that’s about to change, and the result could be a powerful new form of domestic surveillance.Multiple tech and security companies—including Cloudflare, Palo Alto Networks, Spycloud, and Zscaler—have confirmed customer information was stolen in a hack that originally targeted a chatbot system belonging to sales and revenue generation company Salesloft. The sprawling data…

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Zscaler, Palo Alto Networks, SpyCloud among the affected by Salesloft Drift breachIn the wake of last week’s revelation of a breach at Salesloft by a group tracked by Google as UNC6395, several companies – including Zscaler, Palo Alto Networks, PagerDuty, Tanium, and SpyCloud – have confirmed their Salesforce instances were accessed. Sitecore zero-day vulnerability exploited by attackers (CVE-2025-53690)A threat actor is leveraging a zero-day vulnerability (CVE-2025-53690) and an exposed sample ASP.NET machine key to breach internet-facing, on-premises deployments of several Sitecore solutions, Mandiant has revealed.…

Scattered Lapsus$ Hunters threaten Google, demanding that two security experts, one from Google’s Threat Intelligence Group and the other from Mandiant, be fired or they will leak alleged stolen Google data. On Monday, September 1st 2025, a message appeared on a Telegram channel linked to several of the most talked-about cybercrime groups of the past few years. The message, addressed directly to Google CEO Sundar Pichai, demanded that two members of the company’s security team be fired. If Google refused, the hackers threatened to leak what they claimed to be internal databases. The group behind the threat calls itself “Scattered…

Rising cybersecurity threats and attacks are pushing industrial enterprises to view cybersecurity through a very different lens. OT cybersecurity is increasingly driving business objectives and innovation to safeguard operational uptime and enable greater operational flexibility. Beyond protecting continuous operations, OT security empowers critical infrastructure to pivot, innovate, and maintain resilience in dynamic industrial environments. In sectors such as manufacturing, energy, and healthcare, OT security serves to safeguard uptime and enable operational agility, innovation, and strategic flexibility. A manageable OT security framework that facilitates consistent operations will afford stakeholders the trust they need to pursue aspirational projects in the digital space.…

An Argo CD vulnerability allows API tokens with even low project-level get permissions to access API endpoints and retrieve all repository credentials associated with the project. The flaw, tracked under CVE-2025-55190, is rated with the maximum severity score of 10.0 in CVSS v3, and allows bypassing isolation mechanisms used to protect sensitive credential information. Attackers holding those credentials could then use them to clone private codebases, inject malicious manifests, attempt downstream compromise, or pivot to other resources where the same credentials are reused. Argo CD is a Kubernetes-native continuous deployment (CD) and GitOps tool used by numerous organizations, including large…

on a regression problem. I knew that the target I wanted to design a predictive model for was countable (i.e. 0, 1, 2, …). Consequently, I immediately thought about choosing a Generalized Linear Model (GLM) with a relevant discrete distribution, like the Poisson distribution or the Negative binomial distribution. But everything did not go as well as expected. I mistook haste for speed. Zero inflated data First of all, let us have a look at a dataset suitable for the post. I have chosen the results of the NextGen National Household Travel Survey [1]. The variable of interest, named “BIKETRANSIT”, is the…

At least 230 individuals were targeted by North Korean hackers in fake cryptocurrency job interview attacks earlier this year, SentinelOne and Validin report. In continuation of the Contagious Interview campaign that started in 2022, and which was seen employing the ClickFix technique in early 2025, the threat actors pose as recruiters and invite victims to fake cryptocurrency-related interviews. The attackers created dozens of fake websites and have impersonated numerous centralized and decentralized finance entities in hundreds of interview invitations sent to unsuspecting victims. Threat detection and response firm Sekoia retrieved 184 different invitations. After messages are exchanged back-and-forth about the…

The Emergency Management External Affairs Association (EMEAA) has announced that they are hosting Brock Long as their guest speaker on Sep 10 at 12:00 pm ET for an online event.  Brock, an Editorial Board member at Homeland Security Today, will focus on individual and community preparedness—particularly relevant with September being National Preparedness Month—and emphasize the shared responsibility for successful disaster response and recovery, as well as the vital role communicators play in crisis situations. This is a free event!  Attendees from EMEAA, IAEM, AEMO, Disaster Podcast, HSToday, and the general public are welcome to attend.   Presently, Brock serves as the…