Author: HackWatchit
After this week’s attention to META and Yandex localhost abuses, it is time to revisit a core feature/option of protective DNS that offers a feel-good moment to those that applied this safety technique long before this abuse report came about. The in-depth report that triggered this is: Disclosure: Covert Web-to-App Tracking via Localhost on Android. I will address the META approach in a separate blog article, but here I want to focus on the Yandex approach to tracking users, specifically with the intent to bypass modern privacy standards and public policy. As with the vast majority of transactions online, including…
and medium companies achieve success in building Data and ML platforms, building AI platforms is now profoundly challenging. This post discusses three key reasons why you should be cautious about building AI platforms and proposes my thoughts on promising directions instead. Disclaimer: It is based on personal views and does not apply to cloud providers and data/ML SaaS companies. They should instead double down on the research of AI platforms. Where I am Coming From In my previous article From Data Platform to ML Platform in Toward Data Science, I shared how a data platform evolves into an ML platform.…
A cyberattack on United Natural Foods caused bread shortages and bare shelves Pierluigi Paganini June 13, 2025 Cyberattack on United Natural Foods Inc. (UNFI) disrupts deliveries, causing Whole Foods shortages nationwide after systems were taken offline on June 5. United Natural Foods, Inc. (UNFI) is a Providence, Rhode Island–based natural and organic food company. The largest publicly traded wholesale distributor of health and specialty food in the United States and Canada, it is Whole Foods Market‘s main supplier, with their traffic making up over a third of its revenue in 2018. On June 5, United Natural Foods Inc. (UNFI) suffered a cyberattack that disrupted its systems and caused product shortages at Whole…
Hackers are hijacking expired or deleted Discord invite links to redirect users to malicious sites that deliver remote access trojans and information-stealing malware. The campaign relies on a flaw in the Discord invitation system to leverage multi-stage infections that evade multiple antivirus engines. “Reviving” expired Discord invites Discord invite links are URLs that allow someone to join a specific Discord server. They contain an invite code, which is a unique identifier that grants access to a server and can be temporary, permanent, or custom – vanity links available to ‘level 3’ servers paying for special perks. As part of the perks for level 3…
Circle Internet Group CEO Jeremy Allaire reportedly said Friday (June 13) that the stablecoin issuer sees opportunities to partner with a wide range of companies. “It’s a tremendous opportunity as the world connects to this new form of currency on the internet,” Allaire told Bloomberg Television Friday in an interview. “We see tremendous opportunities to collaborate with major technology firms, major payments companies, major financial institutions, and we already do.” Bloomberg reported that on Friday, Circle’s shares were up about 15% for the day and 300% since the company went public last week. The report also noted that stablecoin legislation is moving…
Here’s our webcast with Beau Bullock, Brian Fehrman & Carrie Roberts from Tuesday, November 29. The post WEBCAST: Exchange and OWA attacks – Step by Step appeared first on Black Hills Information Security, Inc..
GenAI has been the star of the show lately. Tools like ChatGPT impressed everyone with how well they can summarize, write, and respond. But something new is gaining ground: agentic AI. These systems don’t just answer questions. They make decisions, take action, and in some cases, even work together to get things done. Naturally, CISOs are starting to ask the big question: can we trust it to be secure? Agentic AI has the potential to change everything for data (Source: ISG) The latest State of the Agentic AI Market Report from ISG offers a look at where agentic AI stands…
Dutch police have announced that they have identified 126 individuals linked to the now dismantled Cracked.io cybercrime forum.Cracked.io was an online platform used by cybercriminals to trade stolen data, access to compromised accounts, hacking tools, and fraud tutorials.The forum, which is said to have helped hackers and fraudsters target at least 17 million US computer users, was seized by international law enforcement agencies in January 2025 as part of “Operation Talent,” which dismantled the site’s infrastructure and seized its domain.A subsequent investigation by Dutch police, using data seized from Cracked.io’s servers, has identified 126 Dutch users of the site -…
OnlyFans allows creators to earn money by offering exclusive content to paying subscribers. Although some use it for fitness, music, or lifestyle content, around 70% of creators focus specifically on adult material. This heavy emphasis on adult content makes the platform a frequent target for scams, impersonation, and privacy breaches. Whether you’re a fan or a creator, you face real security concerns. Understanding the risks associated with OnlyFans, such as data leaks, account hacking, and fraudulent profiles, is crucial for protecting your personal information and reputation. Taking proactive steps can help you navigate the platform more safely and confidently. We’ll show…