Author: HackWatchit

The cybersecurity world exploded in August 2025 when SquareX dropped a bombshell at Black Hat USA: passkeys were “pwned.” Headlines screamed. Twitter erupted. CTOs panicked. But here’s what actually happened: absolutely nothing changed about FIDO’s security. The Anatomy of a Media Meltdown SquareX’s presentation, “Passkeys Pwned: Turning WebAuthn Against Itself,” sent shockwaves through enterprise security.. The post Stop Panicking: The FIDO ‘Bypass’ That Never Actually Bypassed FIDO appeared first on Security Boulevard.

Hackers tried to steal $130 million from Evertec’s Brazilian subsidiary Sinqia S.A.after gaining unauthorized access to its environment on the central bank’s real-time payment system (Pix). Evertec is a public financial technology giant that stands as a major full-service transaction processor in Latin America, Puerto Rico, and the Caribbean. Sinqia, acquired by Evertec in 2023, is a São Paulo-based public company operating in financial software and IT services for the banking and financial industry. Evertec disclosed in a filing to the U.S. Securities and Exchange Commission (SEC) that hackers breached Sinqia’s systems on August 29 and attempted to conduct unauthorized transactions. “On…

In brief A feature film called “Killing Satoshi” is being directed by Doug Liman (“The Bourne Identity”). Set to release in 2026, the movie will star Casey Affleck and Pete Davidson. The thriller will focus on the creation of Bitcoin and the identity of its mysterious creator. Documentaries have so far failed to identify Bitcoin’s pseudonymous creator, Satoshi Nakamoto, convincingly.Now, an upcoming feature film from notable Hollywood creatives aims to put a dramatic spin on the crypto’s creation and impact.Hollywood is turning its lens towards crypto with “Killing Satoshi,” a conspiracy thriller that will explore the secret identity of Satoshi Nakamoto. Director Doug Liman,…

was a Roman ruler known for his military strategies and excellent leadership. Named after him, the Caesar Cipher is a fascinating cryptographic technique that Julius Caesar employed to send secret signals and messages to his military personnel. The Caesar Cipher is quite basic in its working. It works by shifting all the letters of the message to be encrypted by a fixed number of places, called the key. The person receiving it is aware of the key and uses it to decrypt the message, thereby providing an easy and intelligent way of conducting private correspondence. Understanding the Project In this…

Key Findings: Newly released framework called Hexstrike-AI provides threat actors with an orchestration “brain” that can direct more than 150 specialized AI agents to autonomously scan, exploit, and persist inside targets. Within hours of its release, dark web chatter shows threat actors attempting to use HexStrike-AI to go after a recent zero day CVEs, with attackers dropping webshells for unauthenticated remote code execution. These vulnerabilities are complex and require advanced skills to exploit. With Hextrike-AI, threat actors claim to reduce the exploitation time from days to under 10 minutes. From Concept to Reality A recent executive insight blog examined the…

Following its March analysis of the Lab Dookhtegan cyberattack on Iranian oil tankers, Cydome released its ‘Second Wave Findings’ in August, a follow-up that filled in the missing details. The incident disrupted communications on 116 vessels, exposing the fragility of maritime satellite networks and pinpointing the iDirect Falcon service as a critical weak point in VSAT terminals. What initially looked like a modem-level exploitation has now been confirmed as a provider-level compromise of Fanava’s infrastructure. The findings reshape understanding of the campaign. Rather than isolated exploitation of shipboard terminals, attackers infiltrated Fanava’s core infrastructure, turning a satellite service provider into…

Recently, I had the pleasure of speaking with Inda Sahota, the dynamic and deeply empathetic force behind cybersecurity awareness at Fresenius Group. What struck me most wasn’t just her deep understanding of human-centric security, it was how naturally she bridges the gap between personal values and professional practice. Inda brings her whole self into her work: her empathy, intuition, and a grounding in values passed down from her parents, progressive thinkers and first generation Punjabi Indian immigrants to the UK. They instilled in her and her sisters a quiet but powerful sense of agency. When cultural voices around them suggested…

Cloudflare blocked a record 11.5 Tbps DDoS attack Pierluigi Paganini September 02, 2025 Cloudflare blocked a record 11.5 Tbps DDoS attack, a UDP flood from Google Cloud, part of weeks-long assault waves. Cloudflare announced on X that it had blocked the largest ever DDoS attack, peaking at 11.5 Tbps. The UDP flood, mainly from Google Cloud, was part of a wave of attacks that lasted several weeks. Cloudflare said it had blocked hundreds of massive DDoS attacks in weeks, the record-breaking attack was a UDP flood that lasted approximately 35 seconds. Cloudflare’s defenses have been working overtime. Over the past…

The European Union is reportedly pausing its plans to fine Google over its AdTech practices. That pause, Bloomberg News reported Tuesday (Sept. 2), stems from fears that the White House could push back by calling off a transatlantic trade deal. Sources told Bloomberg that European regulators had internally marked Sept. 1 as the day on which Google would received a steep fine and an order to change its business model. As that date got closer, senior officials at the European Commission outside of its antitrust team grew concerned that the timing and severity of the decision could lead Trump to…