Author: HackWatchit

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: June 2025 Patch Tuesday forecast: Second time is the charm?Microsoft has been busy releasing more out-of-band (OOB) patches than usual throughout May. Google fixes Chrome zero-day with in-the-wild exploit (CVE-2025-5419)Google has fixed two Chrome vulnerabilities, including a zero-day flaw (CVE-2025-5419) with an in-the-wild exploit. Rethinking governance in a decentralized identity worldDecentralized identity (DID) is gaining traction, and for CISOs, it’s becoming a part of long-term planning around data protection, privacy, and control. As more organizations experiment with verifiable credentials and self-sovereign identity models, a question…

Introduction On 6 June 2025, the Council of the European Union adopted a revised Cybersecurity Blueprint through Council Recommendation COM(2025) 66 final (Annexes). This updated framework, known as the EU’s Cybersecurity Blueprint, outlines how the EU, its Member States, and designated coordination bodies will prepare for and jointly manage large-scale cyber incidents. It replaces the 2017 guidance and marks a significant shift toward operational alignment in the face of growing cyber threats affecting critical infrastructure and cross-border systems. From Fragmentation to Operational Structure While each Member State has developed its own capabilities to detect and respond to cyber incidents, experience…

Carrie Roberts // A fun story from an adventure in social engineering not too long ago. Thought I’d pass on some things I learned and ways to be more prepared in the future. The Goal Call the IT Help Desk for a customer and try to reset the password for five users. I was not provided the IT Help Desk number or the names of employees. I called the general contact number listed on the “contact us” web page and asked for the phone # of the IT help desk. That was easy. I searched social media for employee names. That was…

The ‘Bitcoin Family’ has completely overhauled its security measures amid rising cases of crypto-related kidnappings, according to a CNBC report.The family, which sold all their belongings in 2017 to invest in Bitcoin (BTC) and now travels around the world, has taken extreme measures amid a rise in perceived threats. This includes storing parts of their Bitcoin wallet seed phrase etched on fireproof metal plates stored across four continents.The family consists of Didi Taihuttu, his wife Romaine, and their three daughters—Joli, Juna, and Jessa. The Taihuttu family gained the spotlight over the years for living a bankless life supported by Bitcoin.Taihuttu…

Approximately 4.5% of the world’s population is colorblind. million people worldwide having just one type of visual impairment. The numbers get significantly higher if you were to take all conditions into account. Yet, it’s a rarely discussed topic. As a data professional, you don’t want anyone misinterpreting your visuals. Sure, being extra clear is more work, but you’ll make a decent chunk of the population happier.  Today you’ll get 5 actionable tips for making your existing visualizations accessible. Concrete Guidelines for Implementing Accessibility In Your Data Visualization But first, let’s go over some general guidelines you should follow when Accessibility…

Is Your Organization Implementing Scalable Solutions for NHI Management? Is your business laying a solid groundwork for efficient Non-Human Identity (NHI) management? If not, you’re likely exposing your organization to unnecessary risks. Data leaks and breaches could be lurking around the corner, jeopardizing your company’s reputation and bottom line. Understanding Non-Human Identities (NHIs) Non-Human Identities, often overlooked, are a crucial element of cybersecurity. These machine identities are the digital “travelers” in your system, each with its “passport” – a unique Secret consisting of an encrypted password, token or key – and a “visa,” which represents the permissions granted by a…

A significant supply chain attack hit NPM after 16 popular Gluestack ‘react-native-aria’ packages with over 950,000 weekly downloads were compromised to include malicious code that acts as a remote access trojan (RAT). BleepingComputer determined that the compromise began on June 6 at 4:33 PM EST, when a new version of the react-native-aria/focus package was published to NPM. Since then, 16 of the 20 Gluestack react-native-aria packages have been compromised on NPM, with the threat actors publishing a new version as recently as two hours ago. Ongoing compromise of NPM packagesSource: BleepingComputer The supply chain attack was discovered by cybersecurity firm Aikido Security, who…

A recent investigation by threat intelligence firm Cyble has spotted a campaign targeting cryptocurrency users through the Google Play Store with more than 20 malicious Android applications. These apps, disguised as trusted crypto wallets like SushiSwap, PancakeSwap, Hyperliquid, and Raydium, have been found harvesting users’ 12-word mnemonic phrases, the keys that unlock their crypto funds. These apps mimic legitimate wallet interfaces, luring users into entering sensitive recovery phrases. Once entered, the attackers can access the real wallets and empty them. While Google has removed many of these fake apps following Cyble’s report, a handful remain live on the store and…

I just wrapped up an energizing few days at the annual International Association for Strategy Professionals (IASP) conference – this year held in Philadelphia. A city steeped in history, where the very concept of American governance was debated and born, proved the perfect setting for a conference focused on this year’s conference theme: Strategic Resilience: Fostering a Culture of Adaptive Planning & Execution.  In the shadow of Independence Hall, we gathered not just to talk about strategy – but to confront the reality that resilience is no longer optional. The pace of disruption across technology, geopolitics, climate, and security demands…