Author: HackWatchit

It’s a fast and easy way to keep in touch with friends and colleagues, but is Google Chat safe? Well, it does offer solid basics like TLS encryption, 2FA, and spam filters, but its lack of end-to-end encryption leaves you open to snooping from Google and Workspace admins. Moreover, Google collects data from your chats to enhance its products, which doesn’t bode well for your privacy. Plus, images you share use public URLs, which means anyone with the link can access them. On top of that, scams can pop up just like on any messaging app. Below, we’ll go over…

What is an agentic identity? An agentic identity is a digitally verifiable identity assigned to an artificial agent — a bot, copilot, LLM function, or autonomous system — capable of acting on a delegated basis. Unlike traditional service accounts or static credentials, agentic identities are: Ephemeral: Possibly spun up and destroyed in seconds. Delegated: Capable of acting on behalf of a user or another agent. Bound to context: Tied to a task, intent, and originator. This is a fundamental shift from how identity has been handled for humans or even machine identities (what we call “non-human identities” or NHIs). NHIs…

fiddleitm is an open-source tool built on top of mitmproxy that helps find malicious web traffic. It works by checking HTTP requests and responses for known patterns that might point to malware, phishing, or other threats. fiddleitm features “I created fiddleitm because I needed a replacement for a similar project I ran for years using Fiddler. It needed to be cross platform compatible and highly extensible. This is a web proxy and debugging tool by a security researcher, for security researchers,” Jérôme Segura, the creator of the tool, told Help Net Security. One of its main features is its rule…

With an exploit for a critical Roundcube vulnerability (CVE-2025-49113) being offered for sale on underground forums and a PoC exploit having been made public, attacks exploiting the flaw are incoming and possibly already happening. According to the Shadowserver Foundation, there is no lack of possible targets: around 84,000 internet-facing installations – predominantly in Europe, Asia, and North America – are still unpatched. What is Roundcube? Roundcube is a free and open-source web-based email client that’s designed to be run on standard web servers, usually a Linux server running Apache or Nginx, with PHP and a database like MySQL or PostgreSQL.…

DOJ moves to seize $7.74M in crypto linked to North Korean IT worker scam Pierluigi Paganini June 09, 2025 US seeks to seize $7.74M in crypto linked to North Korean fake IT worker schemes, per a new DOJ forfeiture complaint. The DOJ filed a civil forfeiture complaint for $7.74M in crypto tied to North Korean fake IT worker schemes linked to the indictment of North Korean Foreign Trade Bank (FTB) representative Sim Hyon Sop. The frozen funds include cryptocurrency, NFTs, and other digital assets. “The Department of Justice filed a civil forfeiture complaint today in the U.S. District Court for…

John Strand // There have been a few conversations at conferences and meet-ups over the past year or so about the validity of penetration testing. There are many things on the horizon of computer security that are going to be disruptive to the industry as a whole. And, in large part, these will be good for the industry. One of them is the rise of bug bounty programs. These are when an organization is hired to have a relatively obscure set of testers test your company resources. I have seen the results first hand, and they can be very good.…

Philadelphia-based cybersecurity firm HostBreach is offering a free CMMC Cyber Snapshot to businesses looking to maintain CMMC compliance. In particular, this refers to government contractors (GovCon) and federal contractors so they can organise their cybersecurity posture pending the Cybersecurity Maturity Model Certification (CMMC) 2.0 standards.  This free offer comes at the right time, with the Department of Defense (DoD) enforcing stricter cybersecurity requirements to protect Controlled Unclassified Information (CUI) on contractor systems.  What is CMMC Compliance? CMMC (Cybersecurity Maturity Model Certification) compliance is a U.S. Department of Defense (DoD) requirement that ensures contractors protect Controlled Unclassified Information (CUI) on their systems.  It…

 Cyber criminals are becoming more brazen, and this month, research highlights the rise of SafePay, a relatively new but increasingly active ransomware group that has quickly established itself as a key player in the cyber crime ecosystem. Meanwhile, FakeUpdates remains a dominant force, continuing to impact global organizations at an alarming rate. The education sector remains the most targeted industry, illustrating persistent vulnerabilities across institutions. SafePay Leads the Ransomware Group Rankings SafePay, first identified in November 2024, has emerged as the most prevalent ransomware group this month. SafePay uses a double-extortion strategy: encrypting files while exfiltrating sensitive data to further…

DNS4EU, an EU-based DNS resolution service created to strengthen European Union’s digital sovereignty, has become reality. What is DNS? The Domain Name System (DNS) “translates” human-readable domain names into IP addresses and back, and is essential for accessing websites. Most users use DNS resolver services provided by their internet service provider (because they are automatically configured) or a public DNS provider like Google or Cloudflare. DNS4EU is meant to be a resilient, fast, reliable, secure, privacy-friendly and EU-based alternative for those. The goal of DNS4EU DNS4EU is an initiative co-funded by the European Union and supported by the European Union…