Author: HackWatchit

The Consumer Financial Protection Bureau (CFPB) reportedly dropped a lawsuit against Walmart and Branch that it filed in December. The agency filed a notice of dismissal Tuesday (May 13), Bloomberg reported Tuesday. The CFPB sued Walmart and Branch on Dec. 23, alleging that the retailer and the FinTech company illegally opened accounts for gig economy delivery drivers without their consent, required drivers to receive their pay through those accounts, collected junk fees from the drivers, and did not deliver the “instant access” to pay that they had promised. The agency’s complaint centered on Walmart’s Spark Driver program, which includes gig economy…

Marks and Spencer confirms data breach after April cyber attack Pierluigi Paganini May 13, 2025 Marks and Spencer (M&S) confirms that threat actors stole customer data in the ransomware attack that hit the company in April. In April, Marks and Spencer Group plc (M&S) announced it had been managing a cyber incident in recent days with the help of external cyber security experts. Customers report outages affecting card payments, gift cards, and M&S’s Click and Collect service across electronic payment systems. “Marks and Spencer Group plc (the Company, or M&S) has been managing a cyber incident over the past few…

Cory considers himself pretty cautious. But like millions of people juggling packed schedules, one click on a hectic day proved costly.  The message looked legit. It said it was from his phone provider. It claimed someone was trying to access his account and urged him to verify via a link. He tapped. And just like that, his phone went dark.  “I was in the middle of a busy day and clicked without thinking. My phone stopped working almost immediately.”  Cory’s Story  What Cory didn’t know was that the message wasn’t from his real cell company—it was from a scammer. The…

is a statistical approach used to answer the question: “How long will something last?” That “something” could range from a patient’s lifespan to the durability of a machine component or the duration of a user’s subscription. One of the most widely used tools in this area is the Kaplan-Meier estimator. Born in the world of biology, Kaplan-Meier made its debut tracking life and death. But like any true celebrity algorithm, it didn’t stay in its lane. These days, it’s showing up in business dashboards, marketing teams, and churn analyses everywhere. But here’s the catch: business isn’t biology. It’s messy, unpredictable,…

Beau Bullock & Mike Felch// Ways to Learn More, Network, and Wake Up Your Inner Hacker Whether you are brand new to InfoSec or a skilled veteran there are ways to push the limits and learn more about this exciting profession. Knowledge doesn’t always come from a classroom but instead can come from networking with other cybersecurity individuals and finding ways to hack anything around you. Mike Felch and Beau Bullock have started various InfoSec meetup groups, spoken publicly, written blog posts, and are on podcasts to help share and learn more at the same time. In this webcast they share…

In brief The 10-year Treasury yield rose to 4.5%, up from 4.1% in early April, as easing U.S.-China trade tensions lifted market sentiment and dampened expectations for Fed rate cuts. April inflation surprised to the downside, but analysts suggest firms may have front-loaded purchases ahead of tariffs, delaying the true impact on consumer prices. Despite rising real yields, FalconX’s David Lawant argues that Bitcoin’s identity as “emerging digital gold” continues to mature, bolstering its long-term institutional case. The yield on the U.S. 10-year Treasury note rose above 4.5% on Tuesday, its highest level in over a month, as investors responded…

SAP has released patches to address a second vulnerability exploited in recent attacks targeting SAP NetWeaver servers as a zero-day. The company issued security updates for this security flaw (CVE-2025-42999) on Monday, May 12, saying it was discovered while investigating zero-day attacks involving another unauthenticated file upload flaw (tracked as CVE-2025-31324) in SAP NetWeaver Visual Composer that was fixed in April. “SAP is aware of and has been addressing vulnerabilities in SAP NETWEAVER Visual Composer,” a SAP spokesperson told BleepingComputer. “We ask all customers using SAP NETWEAVER to install these patches to protect themselves. The Security Notes can be found…

For years, hackers have been relying on file-encrypting malware that targets storage devices, locking users out of their files and demanding a ransom in cryptocurrency for the decryption key. However, a more sophisticated form of malware has recently emerged, one that shifts its focus from storage drives to a much more critical component of computing: the Central Processing Unit (CPU).This new breed of ransomware takes a different approach by infecting the CPU itself, the very “brain” of a server or computing device. What makes this particularly alarming is that even if the victim replaces key hardware components such as the…

5Critical 66Important 0Moderate 0Low Microsoft addresses 71 CVEs including seven zero-days, five of which were exploited in the wild. Microsoft patched 71 CVEs in its May 2025 Patch Tuesday release, with five rated critical and 66 rated as important. This month’s update includes patches for: .NET, Visual Studio, and Build Tools for Visual Studio Active Directory Certificate Services (AD CS) Azure Azure Automation Azure DevOps Azure File Sync Azure Storage Resource Provider Microsoft Brokering File System Microsoft Dataverse Microsoft Defender for Endpoint Microsoft Defender for Identity Microsoft Edge (Chromium-based) Microsoft Office Microsoft Office Excel Microsoft Office Outlook Microsoft Office PowerPoint…