Author: HackWatchit

In a significant security incident, Coinbase, a leading cryptocurrency trading platform, recently disclosed a data breach impacting nearly 70,000 users. This breach, attributed to “insider wrongdoing,” exposed sensitive personal information. This post details how the breach occurred, what data was compromised, and, most importantly, provides crucial steps you can take to protect yourself from potential follow-on attacks and identity theft. This comprehensive guide will delve into the specifics of this breach: how the “insider wrongdoing” facilitated the attack, precisely what information was exposed, and the immediate, actionable steps you can take to safeguard your digital assets and personal identity in…

Read More

On June 1 at 1:26 p.m., Boulder Police were called to the outdoor Pearl Street Mall for a report of an attack on a group of individuals, according to a press release yesterday. The individuals were walking in a regularly scheduled, weekly peaceful event. Officers rushed to the scene at 1325 Pearl St. and arrested the suspect at 1:32 p.m. The suspect has been identified as Mohamed Sabry Soliman, 45, of El Paso County. He was taken to the hospital to be medically evaluated before being booked in the Boulder County Jail on multiple charges. Witnesses reported that the suspect…

Read More

Derek Banks & Joff Thyer // If you’re not currently logging and monitoring the Windows endpoints on the edge of your network you are missing valuable information that is not visible from upstream network devices. Derek and Joff show you how you can gain visibility into these systems by centrally consolidating Windows event logs using free and open source software. Check out the slides here at Dropbox Note: We’re hoping to post a detailed and specific HOW TO blog soon!  Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-What-You-Can Training Available live/virtual and on-demand

Read More

The largest risk for Bitcoin (BTC) in the event of a quantum computing breakthrough is the potential adaptation window to become resistant, VanEck’s head of digital assets research Matt Sigel wrote in a June 2 post on X.He said banks, tech platforms, and other blockchains face the same cryptographic weakness as Bitcoin does in the context of post-quantum computing. Yet, most can patch their servers once post-quantum standards clear the National Institute of Standards and Technology process.Sigel noted that custodians, exchanges, and even Ethereum (ETH) could introduce lattice- or hash-based signature schemes behind the scenes. Central control allows them to…

Read More

I a never-so-mentioned topic, that being how we can make sense of grammar in a non-statistical way. Many AI models, such as DeepMind’s GEM, and Google’s PARSEVAL don’t rely purely on statistical learning to make sense of grammar. Instead, these hybrid models reintroduce formal grammars, such as Combinatory Categorial Grammar (CCG), into their architecture. This allows these models to make use of decades of Linguistic analysis in just a few lines of code. Theoretically, allowing them to reach the same level of competence in less time and at less cost. But how can we turn grammar into something a computer…

Read More

An international law enforcement operation shut down a cybercriminal services designed to encrypt and test their malware to ensure that their malware could not be detected by antivirus or other cybersecurity tools.Agencies from the United States, the Netherlands, and Finland seized the domain for AVCheck, a major counter antivirus (CAV) service that was used by threat groups to test if their malware could be detected by antivirus programs before they deployed it in the wild.At the same time, the U.S. Justice Department seized four domains and their associated server that was used to provide crypting services – including CAV tools…

Read More

Qualcomm fixed three zero-days exploited in limited, targeted attacks Pierluigi Paganini June 02, 2025 Qualcomm addressed three zero-day vulnerabilities that, according to the company, have been exploited in limited, targeted attacks in the wild. Google Android Security team reported the three issues, tracked as CVE-2025-21479, CVE-2025-21480, CVE-2025-27038, to the company. “There are indications from Google Threat Analysis Group that CVE-2025-21479, CVE-2025-21480, CVE-2025-27038 may be under limited, targeted exploitation.” reads the report published by the vendor. “Patches for the issues affecting the Adreno Graphics Processing Unit (GPU) driver have been made available to OEMs in May together with a strong recommendation…

Read More

Microsoft and CrowdStrike announced today that they’ve partnered to connect the aliases used for specific threat groups without actually using a single naming standard. As the two companies explained on Monday, this will be done by mapping (or linking) the different names their security analysts use for each group they track. Microsoft has updated its threat actor reference guide with a list of common hacking groups tracked by CrowdStrike and Redmond, all mapped using each company’s naming systems. “This reference guide serves as a starting point, a way to translate across naming systems so defenders can work faster and more…

Read More

Two U.S. Senators have introduced legislation designed to deepen cybersecurity collaboration within the nation’s energy infrastructure. The proposed measure seeks to formalize and expand the role of the Department of Energy’s Energy Threat Analysis Center in facilitating cross-sector threat intelligence exchange. Titled ‘Energy Threat Analysis Program Act,’ the bipartisan legislative effort if enacted would authorize the Center to serve as a strategic conduit for cyber threat assessments and mitigation strategies, coordinating efforts among the Department of Energy (DOE), the Cybersecurity and Infrastructure Security Agency (CISA), the intelligence community, and private-sector energy operators. Introduced by Jim Risch, a Republican from Idaho,…

Read More