Author: HackWatchit
Brittany C., a dedicated teacher, had been planning a special night for months. After saving up steadily, she landed four prized tickets to Taylor Swift’s Eras Tour for her and her closest friends. But days before the show, she logged into her account—and the tickets were gone. “I’d been saving for months. I was so excited—and then I logged in and the tickets were just… gone. It felt like someone reached through the screen and took that night away from me.” Brittany’s Story Like many of us, Brittany had received plenty of “your data was part of a breach” emails…
Fortinet has patched a critical vulnerability (CVE-2025-32756) that has been exploited in the wild to compromise FortiVoice phone / conferencing systems, the company’s product security incident response team has revealed on Tuesday. About CVE-2025-32756 CVE-2025-32756 is a stack-based overflow vulnerability that can lead to remote code and command execution by unauthenticated attackers. To trigger it, they only need to send a specially crafted HTTP request to a specific API. According to the Fortinet PSIRT, the threat actor has used it to perform scans of the device network, erase system crashlogs, enable “fcgi debugging” setting to log credentials from the system…
Podcast: Play in new window | DownloadSubscribe: Apple Podcasts | Spotify | Amazon Music | RSS Join Beau Bullock and Mike Felch as they talk about ways to learn more, network and wake up your inner hacker. See the full episode here and look at the slides here. *Psst* If you liked this blog, we think you’d enjoy Beau’s class: Breaching the Cloud Available live/virtual and on-demand!
The European Union Agency for Cybersecurity (ENISA) launched the European Vulnerability Database (EUVD or EU Vulnerability Database), as mandated by the NIS2 Directive. Now operational, the EUVD will be maintained by the agency and offers centralized, reliable, and actionable information on cybersecurity vulnerabilities affecting products and services, including relevant details, such as mitigation measures and the current exploitation status. The EU Vulnerability Database aims to enhance the interconnection and integration of publicly available information on cybersecurity vulnerabilities from diverse sources, including Computer Security Incident Response Teams (CSIRTs), vendors, and existing vulnerability databases. To achieve this, the EUVD adopts a holistic…
In episode 50 of The AI Fix, AI brings a slain man back from the dead so he can appear at his killer’s trial, Mark gets a mysterious phone call, Trump uses AI to become Pope Donald the First, Zuck ponders the nature of friendship, Apple says the quiet part out loud, xAI springs a leak, and a philosophy professor says “so long weather forecasters!” Graham explains why researchers in Oxford have made a digital twin of your grandmother, and Mark looks at the bizarre case of road rage victim Chris Pelkey. All this and much more is discussed in…
On May 2025 Patch Tuesday, Microsoft has released security fixes for 70+ vulnerabilities, among them five actively exploited zero-days and two publicly disclosed (but not exploited) vulnerabilities. The zero-days and the publicly disclosed flaws Among the zero-days patched is a memory corruption vulnerability in the Windows scripting engine (CVE-2025-30397) that is being exploited to remotely execute malicious code. “The user would have to click on a specially crafted URL to be compromised by the attacker,” Microsoft explained. “The potential target needs to be using Microsoft Edge in Internet Explorer mode in order for exploitation to be successful – a tall…
How Interlock Ransomware Affects the Defense Industrial Base Supply Chain Pierluigi Paganini May 13, 2025 Interlock Ransomware ‘s attack on a defense contractor exposed global defense supply chain details, risking operations of top contractors and their clients. Resecurity envisions the cascading effects on the defense supply chain due to ransomware activity. In the recent incident, by attacking a defense contractor, Interlock Ransomware uncovered details about the supply chains and operations of many other top defense contractors globally who use their products, including their end customers. The systems that companies use in the defense sector may also hold classified information. Such…
CISA adds TeleMessage flaw to KEV list, urges agencies to act within 3 weeks after a breach exposed unencrypted chats. The Israeli App was used by Trump officials! A serious flaw in TM SGNL, a messaging app by US-Israeli firm TeleMessage used by former Trump administration officials, has now landed on CISA’s Known Exploited Vulnerabilities (KEV) list. The move follows reports of a breach that exposed sensitive communications and backend data. The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-47729 to its KEV catalogue this week. The listing confirms that the vulnerability has been exploited in the wild and sets…
We launched the TDS Author Payment Program back in February, and have since announced a major update—with a far more inclusive earning tier—just last month. Today we’re happy to share that the Program, which has already seen dozens of authors receive their first payout, is now a lot more streamlined and user-friendly thanks to a new Stripe integration. Starting this week, both existing and new authors can connect their Stripe account to their author profile on our Contributor Portal. This will ensure payments are more timely, less clunky, and visible in the same place where authors also draft articles, check…