Author: HackWatchit

It’s tough to keep tabs on the ever-changing crypto gaming space, thanks to the constant flow of news: everything from big game launches and fun degen experiments to token price swings and occasional project collapses. It’s a lot to follow.Luckily, we’re plugged in at Decrypt’s GG. We cover the biggest happenings throughout the week, and then this weekly roundup provides a quick way to catch up, as well as find a bunch of other little bits of news from throughout the week.Top storiesBonk Arena launches: Solana meme coin Bonk has launched its first official video game, Bonk Arena, developed by…

Lohrmann on Cybersecurity At one time, having a personal coach was just for top-tier athletes, but no longer. Whether you prefer the term “mentor” or “life coach,” there’s growth potential for us all to consider. June 08, 2025 •  Dan Lohrmann Adobe Stock/razihusin As I was recently reading select NFL team stories, one article intrigued me because it dealt with much more than your typical sports headlines, coaching or player moves, or even personnel highlights. The article, entitled “Kirk Cousins Raves About New Packers QBs Coach Sean Mannion,” can teach us all about In the article, Atlanta Falcons quarterback Kirk Cousins…

John Strand // Want to get started on a hunt team and discover “bad things” on your network? In this webcast, we will walk through the installation and usage of Real Intelligence Threat Analytics (RITA). RITA is an open-source framework from the folks at Black Hills Information Security and Offensive CounterMeasures. RITA ingests Bro logs and seeks out malicious payload beaconing and scanning behavior. It also determines which systems in your environment are talking with known bad IP addresses and domains. In less than an hour, you will learn how to collect and analyze network traffic for hunt teaming analysis.…

Meta is reportedly weighing a multibillion-dollar investment in artificial intelligence (AI) startup Scale AI.  The tech giant is in talks with Scale AI about an investment that could exceed $10 billion, Bloomberg News reported Sunday (June 8), citing sources familiar with the matter. Scale AI, which counts Microsoft and OpenAI among its clients, offers data labeling services to help businesses train machine learning models. As Bloomberg noted, the startup has been a crucial beneficiary of the generative AI boom, valued at $13.8 billion following a funding round in the spring of 2024. Meta was among the investors in that round,…

that avoiding Dna testing services like 23andMe or Ancestry will help you protect your most confidential data. However, in reality, that control has gradually weakened. With today’s genomic data and advanced inference methods, people can reconstruct your genetic profile without requiring your input. This isn’t something that might happen; it is happening now. It’s a typical result of machine learning being used on large sets of family-related data. Today, genomic systems are more like teams working together than standalone archives. When there are enough genetically close people represented in the data, distant cousins and second-degree relatives, the model can make…

A new variant of the Mirai malware botnet is exploiting a command injection vulnerability in TBK DVR-4104 and DVR-4216 digital video recording devices to hijack them. The flaw, tracked under CVE-2024-3721, is a command injection vulnerability disclosed by security researcher “netsecfish” in April 2024. The proof-of-concept (PoC) the researcher published at the time came in the form of a specially crafted POST request to a vulnerable endpoint, achieving shell command execution through the manipulation of certain parameters (mdb and mdc). Kaspersky now reports having caught active exploitation of CVE-2024-3721 in its Linux honeypots from a new Mirai botnet variant using…

Over 950K weekly downloads at risk in ongoing supply chain attack on Gluestack packages Pierluigi Paganini June 08, 2025 A supply chain attack hit NPM, threat actors compromised 16 popular Gluestack packages, affecting 950K+ weekly downloads. Researchers from Aikido Security discovered a new supply chain attack targeted NPM, compromising 16 popular Gluestack ‘react-native-aria’ packages with over 950K weekly downloads. 🚨 Our Malware Intelligence team has detected an active and on-going attack against packages on npm against the @react-native-aria/ scope.Combined, the 13 affected packages have more than 650.000 downloads per week each.— Aikido Security (@AikidoSecurity) June 7, 2025 The attack began…

Carrie Roberts // OS Command Injection is fun. I recently found this vulnerability on a web application I was testing (thanks to Burp Suite scanner). I was excited because I knew shellz were in my future, but it was not as easy as I expected. Here was my journey and some things I learned. First, I knew the web server was Apache running on Red Hat Linux. I could inject the following ping command and receive a hit to my external server at 1.2.3.4 (let’s pretend). The semicolon at the beginning is what separated the injected command from the original…

Ransomware breaches continue to rise even as fewer victims pay, according to a Delinea report. 69% of organizations globally have fallen victim to ransomware, with 27% being hit more than once. While only 57% of organizations paid ransoms, down from 76% in 2024, the frequency and impact of attacks continued to grow as threat actors turned to other tactics like extortion, with 85% of ransomware victims threatened with exposure. Paying the ransom doesn’t always bring the desired results. About one in four respondents who paid a ransom said they didn’t get all their data back, rising to one in three…