Author: HackWatchit
In this week’s episode, Graham investigates the mysterious Iberian Peninsula blackout (aliens? toaster? cyberattack?), Carole dives in the UK legal aid hack that exposed deeply personal data of society’s most vulnerable, and Dinah Davis recounts how Instagram scammers hijacked her daughter’s account – and how a parental control accidentally saved the day. All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Dinah Davis. Warning: This podcast may contain nuts, adult themes, and rude language. Hosts: Graham Cluley: @grahamcluley.com @[email protected] Carole…
Today, OpenAI rival Anthropic announced Claude 4 models, which are significantly better than Claude 3 in benchmarks, but we’re left disappointed with the same 200,000 context window limit. In a blog post, Anthropic said Claude Opus 4 is the company’s most powerful model, and it’s also the best model for coding in the industry. For example, in SWE-bench (SWE is short for Software Engineering Benchmark), Claude Opus 4 scored 72.5 percent and 43.2 on Terminal-bench. “It delivers sustained performance on long-running tasks that require focused effort and thousands of steps, with the ability to work continuously for several hours, dramatically…
Law enforcement dismantled the infrastructure behind Lumma Stealer MaaS Pierluigi Paganini May 22, 2025 Microsoft found 394,000 Windows systems talking to Lumma stealer controllers, a victim pool that included global manufacturers. A US court order, with Europol and Japan’s JC3 dismantled the Lumma Stealer malware operation, seizing 2,300 domains used for command-and-control and blocking dark web markets offering the infostealer. A US court order, with Europol and Japan’s JC3, dismantled Lumma Stealer’s infrastructure, seizing domains and control panels. Microsoft’s Digital Crimes Unit sinkholed over 1,300 domains to reroute victims to safe servers for analysis and cleanup. “The Justice Department announced…
Coca-Cola and its bottling partner, Coca-Cola Europacific Partners (CCEP), are facing separate cyberattack claims from two distinct threat groups. The Everest ransomware gang says it has breached Coca-Cola’s systems, while another group named Gehenna (aka GHNA) is offering what it claims is a massive database stolen from CCEP’s Salesforce environment. Everest Ransomware Targets Coca-Cola The Everest ransomware group has listed Coca-Cola as a victim on its dark web leak site, sharing screenshots that suggest access to internal documents and personal information of 959 Employees. These include visa and passport scans, salary data, and other HR-related records. According to samples reviewed…
David Fletcher// There are a number of items that I watch on eBay. Included in that group are long-range proximity card readers. As it turns out, I was recently able to pick up an HID MaxiProx 5375 reader, new in box, for less than $100. I had to buy it!! These devices were a centerpiece at Black Hat USA 2014 when Bishop Fox released the Tastic RFID Thief. For those unaware, the reader seen below is typically used at gate or garage entrances so proximity cards can be read from a greater distance. Depending on the reader configuration and the…
full code for this example at the bottom of this post. Multiple regression is used when your response variable Y is continuous and you have at least k covariates, or independent variables that are linearly correlated with it. The data are of the form: (Y₁, X₁), … ,(Yᵢ, Xᵢ), … ,(Yₙ, Xₙ) where Xᵢ = (Xᵢ₁, …, Xᵢₖ) is a vector of covariates and n is the number of observations. Here, Xi is the vector of k covariate values for the ith observation. Understanding the Data To make this concrete, imagine the following scenario: You enjoy running and tracking your performance by recording the distance you…
Signal has released a new version of its end-to-end encrypted communication app for Windows that prevents Microsoft Recall and users from screenshotting text-based conversations happening in the app. The new “Screen security” setting is enabled by default and can be easily disabled through privacy settings. Crucially, though, it’s difficult to disable it by mistake. “Turning off ‘Screen security’ in Signal Desktop on Windows 11 will always display a warning and require confirmation in order to continue,” Signal developer Joshua Lund explained. Signal’s warning when disabling screen security (Source: Signal) Impairing Microsoft Recall and future AI-powered features The warning doesn’t mention…
Immersive, a vendor of people-centric cyber resilience, launched on Wednesday its OT (operational technology) security solution to help organizations prove and improve their readiness for OT threats. The new offering marks a pivotal milestone in advancing cyber readiness for industrial environments in the OT space, which have traditionally lacked robust security measures. As threat actors increasingly target OT infrastructure, with 73 percent of OT professionals reporting intrusions that impact these environments, organizations can no longer rely solely on traditional IT security practices. Immersive’s new OT upskilling solution delivers an interactive, on-demand approach designed to upskill both red and blue teams,…
What is CryptoSlate Alpha?CryptoSlate Alpha requires a one-time purchase of our membership NFT using SOL, the native token of Solana. Connecting your Solana wallet is required to complete the purchase. Learn more ›Connected to AlphaWelcome! 👋 You are connected to CryptoSlate Alpha. To manage your wallet connection, click the button below.Disclaimer: By purchasing CryptoSlate Alpha membership, you accept and recognize that you will be bound by the terms and conditions of your third-party digital wallet provider, as well as any applicable terms and conditions of the Access Foundation. CryptoSlate shall have no responsibility or liability with regard to the provision,…