Author: HackWatchit

OpenAI may be planning to challenge Microsoft Teams Copilot integration with a new “Record” feature in ChatGPT. While ChatGPT supports third-party services, it’s not yet possible to use it to summarize live meetings or generate an AI-powered transcript.  As spotted by X user M1Astra, ChatGPT mobile app code clearly mentions a “Record” feature for live meetings that supports pausing, resuming, and turning audio into text. References to new Record feature in ChatGPT mobile app When turned on, you’ll be able to “drag to talk,” get detailed reports, and quickly generate summaries of your meetings. ChatGPT also asks for mic and system…

Dakota Nelson// Cross Origin Request Sharing (CORS) is complicated, and that complexity creates a lot of places where security vulnerabilities can sneak in. This article will give you a “lite” overview of CORS, with a focus on security vulnerabilities that we see most frequently on tests. This isn’t intended to be a full CORS primer – if you’re interested in really diving in, there’s a resources section at the end that will help you get started. CORS has many facets, so let’s cover a few of the more common cases one by one and see what can go wrong. The…

Coinbase, one of the leading cryptocurrency exchanges in the United States, has been the target of a significant cyber attack, potentially leading to losses ranging from $180 million to $400 million in the current financial year. This forecast comes from the exchange itself, after conducting an analysis of the incident’s immediate and long-term impacts, including the drop in the company’s share value by approximately 3%.According to information obtained by Cybersecurity Insiders, the breach appears to have stemmed from an insider threat. A trusted individual within the company gathered sensitive information and passed it along to external actors. On May 11,…

Proofpoint has entered into a definitive agreement to acquire Hornetsecurity, a pan-European provider of AI-powered Microsoft 365 (M365) security, data protection, compliance, and security awareness services. Terms of the deal are confidential. The acquisition significantly enhances Proofpoint’s ability to provide human-centric security to SMBs globally through MSPs, further enabling all organizations to protect their people and defend their data. By combining Proofpoint’s global leadership with Hornetsecurity’s expertise in the MSP ecosystem, the two companies will advance their shared mission to protect organizations of all sizes and the people behind them. Hornetsecurity brings a high-performing business into the Proofpoint portfolio with…

Since the advent of blockchain tech upon the release of Bitcoin’s landmark 2008 whitepaper, the technology seems to have taken off in a remarkable manner. In fact, over the last few years alone, an estimated 81% of the world’s leading public companies are making use of these decentralized ledgers to help streamline their day-to-day operations. However, as with any great idea, there are always some underlying problems that emerge as and when mainstream adoption occurs at a massive scale. In the case of blockchain, its unfettered transparency — though undeniably one of its most significant selling points — has now…

In a recent discovery, Check Point researchers have identified a large-scale phishing campaign that exploits the guise of email quarantine notifications. This campaign, consisting of 32,000 emails, has targeted 6,358 customers across various regions. The primary objective of the attackers is to deceive recipients into providing their login credentials through a fake login page. Campaign Overview The phishing emails were sent from compromised accounts belonging to three different domains. The subject lines of these emails were written in such a way as to appear urgent and legitimate. Examples include: “Email Sent to Quarantine – Review Needed” “Email Delivery Delayed –…

Coinbase disclosed a data breach after an extortion attempt Pierluigi Paganini May 15, 2025 Coinbase confirmed rogue contractors stole customer data and demanded a $20M ransom in a breach reported to the SEC. Coinbase said rogue contractors stole data on under 1% of users and demanded $20M; the data breach was disclosed in an SEC filing. On May 11, 2025, the company received a ransom demand from a threat actor claiming to have customer and internal data. The attacker claimed to have paid overseas contractors in support roles to extract this information from Coinbase’s internal systems, leveraging their legitimate access.…

In what experts are calling a novel legal outcome, the 22-year-old former administrator of the cybercrime community Breachforums will forfeit nearly $700,000 to settle a civil lawsuit from a health insurance company whose customer data was posted for sale on the forum in 2023. Conor Brian Fitzpatrick, a.k.a. “Pompompurin,” is slated for resentencing next month after pleading guilty to access device fraud and possession of child sexual abuse material (CSAM). A redacted screenshot of the Breachforums sales thread. Image: Ke-la.com. On January 18, 2023, denizens of Breachforums posted for sale tens of thousands of records — including Social Security numbers,…

Coinbase insider breach: Bribed overseas agents stole user data; company rejects ransom, offers $20M reward, boosts security, and cooperates with law enforcement. Coinbase, the largest US-based cryptocurrency exchange, has disclosed a major data breach involving bribed overseas customer support agents who stole sensitive customer information. The attackers demanded a $20 million ransom, which Coinbase refused to pay. Instead, the company has offered a $20 million reward for information leading to the arrest and conviction of the perpetrators. What Happened Cybercriminals targeted Coinbase’s external customer support agents, bribing a small group to access internal systems. These insiders extracted data from less…