Author: HackWatchit

Bitcoin is holding firm near historic highs as the U.S. dollar tumbles to its weakest level in more than three years, spotlighting the fragile dance between crypto prices and the world’s dominant reserve currency. As of Friday morning in London, Bitcoin traded at $107,639, up around 9.8% since the start of the year and 6% over the last week. The world’s largest cryptocurrency remains just shy of its all-time high of $111,900 set on May 21. Meanwhile, the U.S. Dollar Index (DXY) has slipped to 97.10, marking a 10% decline year-to-date and fueling speculation about how much further the dollar could…

Leeds, UK, June 27th, 2025, CyberNewsWire Leeds United FC, a globally recognized football club, and Reflectiz, a leading provider of proactive web security, today announced an upcoming webinar titled “Beyond the Breach: How Leeds United Achieved Proactive Web Security After a Magecart Attack.” This essential webinar will delve into the critical topic of client-side security, offering invaluable lessons from Leeds United’s real-world experience with a Magecart attack. This live webinar will feature Graham Peck, Head of IT and Security at Leeds United, who will provide a firsthand account of the Magecart attack on the club’s online shop in February 2025.…

We need to talk about data integrity. Narrowly, the term refers to ensuring that data isn’t tampered with, either in transit or in storage. Manipulating account balances in bank databases, removing entries from criminal records, and murder by removing notations about allergies from medical records are all integrity attacks. More broadly, integrity refers to ensuring that data is correct and accurate from the point it is collected, through all the ways it is used, modified, transformed, and eventually deleted. Integrity-related incidents include malicious actions, but also inadvertent mistakes. We tend not to think of them this way, but we have…

APT42 impersonates cyber professionals to phish Israeli academics and journalists Pierluigi Paganini June 27, 2025 Iran-linked APT42 targets Israeli experts with phishing attacks, posing as security professionals to steal email credentials and 2FA codes. Iran-linked group APT42 (aka Educated Manticore, Charming Kitten, and Mint Sandstorm) is targeting Israeli journalists, cybersecurity experts, and academics with phishing attacks, posing as security professionals to steal email credentials and 2FA codes, according to Check Point. APT42 focuses on highly targeted spear-phishing and social engineering techniques, its operations broadly fall into three categories, credential harvesting, surveillance operations, and malware deployment. “The threat actors directed victims who…

When the United States bombed Iran in the early hours of Sunday local time, it targeted three facilities central to the country’s nuclear ambitions: the Fordow uranium enrichment plant, the Natanz nuclear facility, and the Isfahan nuclear technology center. Newly released satellite images show the impact of the attack—at least, what can be seen on the ground.The brunt of the bombing focused on Fordow, where US forces dropped a dozen GBU-57 massive ordnance penetrators as part of its “Midnight Hammer” operation. These 30,000-pound “bunker-buster” bombs are designed to penetrate as deep as 200 feet into the earth before detonating. The…

A recent report by the Washington, D.C.-based Tech Transparency Project (TTP) reveals that numerous free Virtual Private Network (VPN) apps, despite earlier warnings, continue to be available on both Apple’s App Store and Google’s Play Store, posing major privacy and national security risks. According to the organisation’s claims, these apps, many with hidden ties to Chinese companies, could be exposing sensitive user data to the Chinese government. For your information, VPNs are tools designed to create a secure, encrypted connection over the internet, masking a user’s identity and online activity. However, some users express concern about VPN services owned by…

Ahold Delhaize, one of the world’s largest food retail chains, is notifying over 2.2 million individuals that their personal, financial, and health information was stolen in a November ransomware attack that impacted its U.S. systems. The multinational retailer and wholesale company operates over 9,400 local stores across Europe, the United States, and Indonesia, employing more than 393,000 people and serving approximately 60 million customers each week in-store and online. It has reported yearly net sales of over $104 billion last year and it operates under a wide range of brands, including Food Lion, Stop & Shop, Giant Food, and Hannaford…

Amid growing warnings from agencies like the FBI and DHS about Iranian cyber activity, Check Point Research is sharing fresh, real-world examples from the past few days to shed light on how these threats are playing out in practice. We’ve identified the reemergence of an active, global spear-phishing campaign attributed to the Iranian threat actor Educated Manticore, also tracked as APT42, Charming Kitten, and Mint Sandstorm. Associated with the IRGC Intelligence Organization, this group is known to target public figures around the world. Currently, the campaign is executing sophisticated credential theft operations against high-profile individuals in Israel, while the real…

In a recent conversation with Paul Asadoorian, he mentioned a Nessus plugin called nmapxml.  He was not sure how well it worked but suggested I try it out. The plugin allows you to import Nmap scan results for Nessus to use in the discovery phase of a scan.  The discovery phase of a Nessus scan occurs at the beginning when Nessus is trying to “discover” which hosts are alive as well as which services and operating systems are running on those hosts that will require vulnerability testing.   But Nessus has a built-in port/service scanner you say, right?  Yes, you…