Author: HackWatchit

Gold price is nearing its all-time high at $3,433, further fueling its up-and-to-the-right rally in 2025, as escalating tensions in the Middle East drive investors toward traditional safe-haven assets.The surge in gold price reflects not only geopolitical uncertainty but also a broader shift in global reserve strategies. The ECB reported last week that gold had overtaken the euro in 2024 as the world’s second-most important reserve asset, driven by record purchases by central banks.Over the past month, the spot gold price has climbed nearly 5%, rebounding from a mid-May low of around $3,123 and gaining 1.6% overnight, pushing it above…

Democratic members of the House Homeland Security Committee have asked the U.S. Government Accountability Office (GAO) to review federal cybersecurity programs that support vulnerability management. The request specifically calls for an assessment of the effectiveness of the Cybersecurity and Infrastructure Security Agency’s (CISA) Common Vulnerabilities and Exposures (CVE) program and the National Institute of Standards and Technology’s (NIST) National Vulnerability Database (NVD). In a letter to Gene Dodaro, Comptroller General of the GAO, Bennie G. Thompson, a Democrat from Mississippi and ranking member of the Committee on Homeland Security, and Zoe Lofgren, a Democrat from California and ranking member of…

Google is using a new AI model to forecast tropical cyclones and working with the US National Hurricane Center (NHC) to test it out. Google DeepMind and Google Research launched a new website today called Weather Lab to share AI weather models that Google is developing. It says its new, experimental AI-based model for forecasting cyclones — also called typhoons or hurricanes when they reach a certain strength — can generate 50 different scenarios for a storm’s possible track, size, and intensity up to 15 days in advance. The NHC is working with Google to evaluate the effectiveness of the…

Paris, Jun. 3, 2025, CyberNewswire–Arsen, the cybersecurity startup known for defending organizations against social engineering threats, has announced the release of its new Vishing Simulation module, a cutting-edge tool designed to train employees against one of the fastest-growing attack vectors: voice phishing (vishing). This new module uses AI-generated voices and adaptive dialogue systems to simulate live phone-based social engineering attacks — such as those impersonating IT support desks — in a realistic and scalable way. Voice-based attacks With attackers increasingly turning to phone calls as a vector for credential theft and initial access, organizations must extend their training and testing…

A South African court has given a man an eight year prison sentence after finding him guilty of holding his former employer to ransom, after breaching its security.36-year-old Lucky Majangandile Erasmus was convicted of 17 charges related to the attempted extortion of payment service provider Ecentric Payment Systems, in what has been described as a landmark case.In a press release South African police described how Erasmus and a company insider installed software without authorisation on Ecentric’s systems which granted them remote access, enabling them to steal sensitive data and make unauthorised changes to senior managers’ passwords.On 14 November 2023, Ecentric’s…

Carrie Roberts* // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. Using a trusted certificate and non-default Empire options will help increase your chances of getting a successful session out of a network. Follow these instructions to get setup. First, get a signed digital certificate for your server using Let’s Encrypt. Visit https://certbot.eff.org/ for instructions. The process is also shown here…

will become our digital assistants, helping us navigate the complexities of the modern world. They will make our lives easier and more efficient.” Inspiring and completely unbiased statement from someone who already invested billions on this new technology. The hype is real for AI agents, and billions are pouring in to build models that will make us more productive and more creative. Hard to disagree when I happily enjoy my morning coffee while Cursor is coding my unit tests. Yet, asking people in my network how they use AI in their day-to-day, their answers often mention anecdotal use cases, anywhere…

Microsoft is investigating a known issue that triggers Secure Boot errors and prevents Surface Hub v1 devices from starting up. These boot problems only impact Surface Hub v1 systems running Windows 10, version 22H2, after installing the KB5060533 June 2025 Windows security update. Microsoft says that “Surface Hub v1 devices might fail to start with the following error: ‘Secure Boot Violation. Invalid signature detected. Check Secure Boot Policy in Setup.” It’s also important to note that this known issue did not impact Surface Hub 2S and Surface Hub 3 devices, according to Redmond. The company says it released a mitigation…

Palo Alto Networks fixed multiple privilege escalation flaws Pierluigi Paganini June 14, 2025 Palo Alto Networks addressed multiple vulnerabilities and included the latest Chrome patches in its solutions. Palo Alto Networks fixed seven privilege escalation vulnerabilities and integrated the latest Chrome security patches into its products. Palo Alto applied 11 Chrome fixes and patched CVE-2025-4233, a cache vulnerability impacting the Prisma Access Browser. The most severe vulnerability, tracked as CVE-2025-4232 (CVSS score of 7.1), is an authenticated code injection through wildcard on macOS. “An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app…