Author: HackWatchit

New research from Claroty’s Team82 uncovered critical security vulnerabilities in the Allen-Bradley (Rockwell Automation) PowerMonitor 1000, revealing an exposed attack surface in this widely deployed industrial device. The team conducted a detailed analysis of the device’s internal architecture and firmware to better understand its operational behavior and underlying components. Team82 detected three severe vulnerabilities that could allow an attacker to gain control of the device, cause it to crash, or, in certain cases, execute arbitrary code remotely. Each of these vulnerabilities was assigned a CVSS v3 score of 9.8 by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), reflecting their…

David Fletcher// My wife and I recently purchased a 2016 Ford Flex to replace an aging version of the same make and model that met an untimely fate. During the feature walk-through the salesperson identified how convenient this version of the Sync platform was because you could update the firmware on the infotainment unit over WiFi. As soon as the words were spoken my wife turned to me and said, “Don’t get any ideas.” However, she knew that there would be no stopping me from at least analyzing the update process. When we got the car home, I created a…

82% of organizations already use AI agents, but only 44% of organizations report having policies in place to secure them, according to SailPoint. While 53% are in the process of developing such policies, the reality is that most remain exposed today. AI agents pose security risks for organizations 96% of technology professionals consider AI agents a growing risk, even as 98% of organizations plan to expand their use of them within the next year. The terms “AI agent” or “agentic AI” broadly encompass autonomous systems that perceive, make decisions, and take action to achieve specific goals within an environment. These…

The UK’s Ministry of Defence has revealed that it was the target of a sophisticated, cyber attack that saw Russia-linked hackers pose as journalists.The foiled attack was one of over 90,000 cyber attacks linked to hostile states directed against the UK’s defence over the past two years, according to the Ministry of Defence.The spear phishing campaign, which targeted staff with the intention of planting malware on MoD systems, was dubbed “Damascened Peacock”.MoD investigators based at the Global Operations Security Control Centre in Corsham, Wiltshire explained that the attack was given that name in honour of the market town’s famous feathered…

Highlights Volatility in global trade underscores the need for trust and reliability, especially as shifting tariffs and legal uncertainties disrupt supply chains, inflating costs and complicating cross-border B2B commerce. Traditional banks can leverage their trust advantage in trade finance, highlighting their expertise in regulatory oversight, global correspondent networks and compliance infrastructure — positioning them as vital partners. To stay competitive, banks can innovate by embracing digitization, AI and automation, while still offering legal certainty and risk mitigation. Certainty is at a premium in uncertain times, particularly across the landscape of cross-border B2B commerce. The volatile tariff landscape has reportedly cost…

A newly emerged threat actor, going by the alias “Often9,” has posted on a prominent cybercrime and database trading forum, claiming to possess 428 million unique TikTok user records. The post is titled “TikTok 2025 Breach – 428M Unique Lines.” The seller’s post, which appeared on the forum yesterday (May 29, 2025), promises a dataset containing detailed user information such as: Email addresses Mobile phone numbers Biography, avatar URLs, and profile links TikTok user IDs, usernames, and nicknames Account flags like private_account, secret, verified, and ttSeller status. Publicly visible metrics such as follower counts, following counts, like counts, video counts,…

US Treasury sanctioned the firm Funnull Technology as major cyber scam facilitator Pierluigi Paganini May 30, 2025 The U.S. sanctioned Funnull Technology and Liu Lizhi for aiding romance scams that caused major crypto losses through fraud infrastructure. The U.S. Department of Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Philippines-based company Funnull Technology Inc. and its admin Liu Lizhi for enabling romance scams, causing $200M in U.S. victim losses. A romance scam is a type of online fraud where a scammer pretends to build a romantic relationship with someone to gain their trust and ultimately exploit them, often for financial…

Never miss a new edition of The Variable, our weekly newsletter featuring a top-notch selection of editors’ picks, deep dives, community news, and more. We’re wrapping up another eventful month, one in which we published dozens of new articles on cutting-edge and evergreen topics alike: from math for machine learning engineers to the inner workings of the Model Context Protocol. Read on to explore our most-read stories in May—the articles our community found the most useful, actionable, and thought-provoking. In case you feel inspired to write about your own passion projects or recent discoveries, don’t hesitate to share your work with…

Jordan Drysdale // The following content is loosely based on a presentation I gave at BSides Denver. After speaking at BSides Denver, one of the audience members spent some time discussing the content with BHIS. He called the software he helped this particular data broker build “The Actual Privacy Death Star.” His claim was that approximately 1400 unique data points were collected on a per-human basis and were then used to target ads. The most profitable of the targeted ads, he claimed, were delivered under certain ‘manic conditions.’ His point was that when people were searching things like opioid abuse,…