Author: HackWatchit

In the first story [1] of this series, we have: Addressed multiplication of a matrix by a vector, Introduced the concept of X-diagram for a given matrix, Observed behavior of several special matrices, when being multiplied by a vector. In the current 2nd story, we will grasp the physical meaning of matrix-matrix multiplication, understand why multiplication is not a symmetrical operation (i.e., why “A*B ≠ B*A“), and finally, we will see how several special matrices behave when being multiplied over each other. So let’s start, and we’ll do it by recalling the definitions that I use throughout this series: Matrices…

Notable terrorist attacks frequently generate a complex array of both intended and unintended consequences that reverberate far beyond the immediate aftermath. The September 11, 2001 attacks, in particular, profoundly reshaped global political dynamics and fundamentally reoriented international security priorities throughout the early 21st century. In direct response, the United States embarked on extensive military campaigns in Afghanistan and Iraq, marking the inception of the global war on terrorism—a protracted engagement that significantly expanded American military presence and influence across multiple regions worldwide.  Similarly, the October 7, 2023 attacks carried significant regional and global implications. On that day, Hamas coordinated a…

A new version of the Android malware “Godfather” creates isolated virtual environments on mobile devices to steal account data and transactions from legitimate banking apps. These malicious apps are executed inside a controlled virtual environment on the device, enabling real-time spying, credential theft, and transaction manipulation while maintaining perfect visual deception. The tactic resembles that seen in the FjordPhantom Android malware in late 2023, which also used virtualization to execute SEA bank apps inside containers to evade detection. However, Godfather’s targeting scope is much broader, targeting over 500 banking, cryptocurrency, and e-commerce apps worldwide using a full virtual filesystem, virtual Process ID,…

China-linked group Salt Typhoon breached satellite firm Viasat Pierluigi Paganini June 19, 2025 China-linked APT Typhoon has reportedly targeted satellite firm Viasat, the group has breached multiple telecom providers in the past. China-linked APT group Salt Typhoon hacked the satellite communications firm Viasat, the cyber-espionage group has previously breached the networks of multiple other telecom providers in the United States and globally. Viasat is a global communications company based in Carlsbad, California, that specializes in satellite-based connectivity solutions across multiple sectors. The intrusion was discovered earlier this year and the company investigated the security breach with the help of federal…

AI-powered coding assistants like GitHub’s Copilot, Cursor AI and ChatGPT have swiftly transitioned from intriguing gadgets to indispensable sidekicks for modern developers. A recent survey by Stack Overflow revealed that over 76% of developers now rely on these assistants, with more than 80% reporting significant productivity improvements by using AI code generators & augmented code editors. These “virtual teammates” simplify complex tasks, streamline development workflows, and significantly accelerate project timelines. But with every innovation comes new risks. AI coding assistants occasionally generate what’s known as “hallucinations”, confident recommendations for software packages that simply don’t exist.  A recent study by researchers…

Sally Vandeven // I found myself with a little extra time one day (and I didn’t tell my project manager) so I thought it would be a great time to write a blog post.  I asked two friends/colleagues if there were any topics they would like to see covered and interestingly, they both independently responded with the same topic.  They wanted to read about some of the physical pen tests that we do.  Excellent idea! It is interesting, intriguing and mostly fun (more on that later) – so here you go. Organizations hire us to test the security of their…

Cyberstalkers are increasingly turning to cheap GPS trackers to secretly monitor people in real time. These devices, which often cost less than $30 and run on 4G LTE networks, are small, easy to hide under a bumper or in a glovebox, and can go undetected for months. A new paper from researchers at NYU, You Can Drive But You Cannot Hide, presents an affordable, practical method for detecting these hidden cellular GPS trackers using off-the-shelf hardware. The approach is designed to help victims and security pros identify surveillance devices attached to vehicles, without expensive gear. “We present an innovative algorithm…

Cybercriminals are finding clever new ways to trick people, even on the official websites of major companies. Malwarebytes Senior Director of Research, Jérôme Segura, has identified a widespread scam where fake phone numbers for customer support are being inserted directly onto the legitimate help pages of well-known brands. This trick has been seen affecting companies like: HP Apple Netflix PayPal Microsoft Facebook Bank of America How the Search Parameter Injection Works The scam typically starts with a sponsored advertisement on Google, which directs users to the real company website. It is worth noting that instead of creating a fake website,…

For many years, cybersecurity professionals have relied on Indicators of Compromise (IOCs) such as IP addresses, domain names, and file hashes to defend against a number of cyber threats. While these technical artifacts provide valuable data points, their effectiveness as a primary defense mechanism is waning in the face of increasingly strategic adversaries. Time has shown that adversarial strategies gravitate towards paths of least resistance. The Limitations of Traditional IOCs Attackers can easily spoof traffic sources and rapidly change their operational infrastructure, rendering techniques like IP address blocking efforts futile. An IP address identified as malicious today might be obsolete…