Author: HackWatchit

Apple confirmed that Messages app flaw was actively exploited in the wild Pierluigi Paganini June 13, 2025 Apple confirmed that a security flaw in its Messages app was actively exploited in the wild to target journalists with Paragon’s Graphite spyware. Apple confirmed that a now-patched vulnerability, tracked as CVE-2025-43200, in its Messages app was actively exploited in the wild to target journalists with Paragon’s Graphite spyware. The IT giant addressed the flaw CVE-2025-43200 on February 10, 2025, with the release of iOS 18.3.1, iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, watchOS 11.3.1, and visionOS 2.3.1. The same versions also addressed…

but good prompting that provides efficient and reliable outputs is not. As language models grow in capability and versatility, getting high quality results depends more on how you ask the model than the model itself. That’s where prompt engineering comes in, not as a theoretical exercise, but as a day-by-day practical built-in experience in production environments, with thousands of calls every day. In this article, I’m sharing five practical prompt engineering techniques I use almost every day to build stable and reliable, high-performing AI workflows. They are not just tips I’ve read about but methods I’ve tested, refined, and relied…

Bitcoin’s retracement from $109,000 over the past 24 hours capped off a volatile week defined by thin weekend liquidity and sharp reactions to geopolitical stress. In the early hours of Friday, June 13, the market saw the $1,490 CME gap closed, which formed between the Friday (June 6) close at $105,060 and the Sunday (June 8) open at $106,550. After slow gains for most of the week, BTC plunged below $103,000 between June 12, completing the textbook gap fill at the 00:00 UTC candle on June 13. The gap closed after Israel launched targeted strikes against Iranian nuclear and military…

The recent outage that brought down multiple digital infrastructures worldwide became a clear reminder that IT disasters can happen unexpectedly. In a statement to CBS News, Microsoft said that a “CrowdStrike update was responsible for bringing down critical systems”. CrowdStrike is the antivirus software provider for Windows devices, which means that the incident occurred due to an unpredicted error in the supply chain.  Some of the impacted Microsoft apps include OneDrive, OneNote, Outlook, PowerBI, Microsoft Fabric, Microsoft Teams, Microsoft Purview, Viva Engage and Microsoft 365 Admin Center. Users experienced issues with synchronization, file access, functionality delays and registration problems.  Similarly to…

Victoria’s Secret has restored all critical systems impacted by a May 24 security incident that forced it to shut down corporate systems and the e-commerce website. The company operates around 1,380 retail stores in nearly 70 countries and has reported net sales of $1.353 billion for the first quarter of 2025, with a forecasted net sales range of up to $6.3 billion for the year. In a Thursday filing with the U.S. Securities and Exchange Commission, the company disclosed that all restored critical systems are now fully operational and that it’s working with external experts to assess the cyberattack’s impact.…

Everyone loves being able to speed up their work with custom tools, but the clear problem is that computers are a bit too fussy about everything being perfect and exact. One very specific place where this problem comes up is when working with users on a domain. No matter how you try to get a list of users, it’s going to be packaged with all sorts of small things like inconsistent spacing and visual details that offer no real value. This isn’t a real problem because we are just fine distinguishing between the fluff and the real data we need. While…

StackHawk announced Sensitive Data Identification to give security teams visibility into high-risk APIs across thousands of code repositories within an organization. With most security teams only aware of approximately 10% of their API attack surface, StackHawk illuminates the complete API landscape, including shadow APIs, zombie APIs that are no longer under active development, and ghost APIs that bypass traditional gateways. Leveraging StackHawk’s existing API Discovery platform, which automatically uncovers APIs directly from source code repositories, Sensitive Data Identification enables security teams to prioritize testing of critical APIs handling sensitive data references, such as PII fields, cardholder data, and health information,…

U.S. Africa Command (AFRICOM) conducted a precision airstrike against ISIS-Somalia on June 12, 2025, about 45 miles southeast of Bosaso, Puntland—underscoring Washington’s sustained effort to neutralize threats at their origin before they can reach American shores.  Bosaso is a strategic port city in the semi-autonomous Puntland State of Somalia, located on the Gulf of Aden. This region sits along key maritime corridors vital to global trade and has long been a bastion for both licit economic activity and illicit militant movement. While Puntland enjoys a degree of self-governance, it remains under Somalia’s federal jurisdiction and has frequently partnered with U.S.…

Exposed eyes: 40,000 security cameras vulnerable to remote hacking Pierluigi Paganini June 12, 2025 Over 40,000 internet-exposed security cameras worldwide are vulnerable to remote hacking, posing serious privacy and security risks. Bitsight warns that over 40,000 security cameras worldwide are exposed to remote hacking due to unsecured HTTP or RTSP (Real-Time Streaming Protocol) access. These cameras stream live feeds openly via IP addresses, making them easy targets for spying, cyberattacks, extortion, and stalking, posing major privacy and security threats. Identifying HTTP-based security cameras is challenging due to the wide variety of models and interfaces. Researchers analyzed popular brands to develop…