Author: HackWatchit
The website of iClicker, a popular student engagement platform, was compromised in a ClickFix attack that used a fake CAPTCHA prompt to trick students and instructors into installing malware on their devices. iClicker is a subsidiary of Macmillan and is a digital classroom tool that allows instructors to take attendance, ask live questions or surveys, and track student engagement. It is widely used by 5,000 instructors and 7 million students at colleges and universities across the United States, including the University of Michigan, the University of Florida, and universities in California. According to a security alert from the University of…
German police seized eXch crypto exchange Pierluigi Paganini May 12, 2025 Germany’s BKA shut down eXch crypto exchange, seizing its infrastructure over money laundering and illegal trading platform charges. On April 30, 2025, Germany’s Federal Criminal Police (BKA) shut down the eXch crypto exchange (eXch.cx), seizing its infrastructure over money laundering and illegal trading allegations. ZIT, BKA, and Dutch FIOD led the operation, expecting the evidence to aid other cybercrime investigations. The law enforcement published the following notice on the seized platform. The German law enforcement seized €34M in crypto and 8TB of data from the platform, marking its third-largest…
Podcast: Play in new window | DownloadSubscribe: Apple Podcasts | Spotify | Amazon Music | // Jordan Drysdale and Kent Ickler talk about Best Practices for setting up Active Directory. Bre joins as fake Sierra to host and ask questions from the audience since real Sierra was on vacation. See the webcast and Kent’s show notes here. Want to learn more mad skills from the person who wrote this blog? Check out these classes from Jordan and Kent:
The Bluetooth Special Interest Group has released Bluetooth 6.1, and one of the most important new features is an update to how devices manage privacy and power. The update, called Bluetooth Randomized RPA (resolvable private address) Updates, helps protect users from tracking and reduces battery drain. Better privacy Bluetooth devices often change their address to make it harder for others to track them. In Bluetooth 6.1, the timing of these changes is now randomized. This makes it much harder for third parties to link device activity over time or figure out patterns in behavior. Longer battery life The new feature…
United States Customs and Border Protection plans to log every person leaving the country by vehicle by taking photos at border crossings of every passenger and matching their faces to their passports, visas, or travel documents, WIRED has learned.The escalated documentation of travelers could be used to track how many people are self-deporting, or leave the US voluntarily, which the Trump administration is fervently encouraging to people in the country illegally.CBP exclusively tells WIRED, in response to an inquiry to the agency, that it plans to mirror the current program it’s developing—photographing every person entering the US and match their…
The following is a guest post and opinion by Ruchir Punjabi, Co-Founder at ReNRG.Crypto, for all its growth, has an energy reputation problem. The proof-of-work era left a lingering carbon footprint, and while the industry has largely pivoted to more efficient mechanisms, the perception persists.Yet within the technology that birthed this conundrum lies a potential solution: Decentralized Physical Infrastructure Networks (DePINs). These networks, which bridge the gap between the digital and physical worlds, could redeem crypto’s energy image while also accelerating the global energy transition.The promise of grid optimization, often touted as a clear IoT application, remains largely theoretical in…
Join hosts Tom Eston, Scott Wright, and Kevin Johnson in a special best-of episode of the Shared Security Podcast. Travel back to 2009 with the second-ever episode featuring discussions on early Facebook bugs, cross-site scripting vulnerabilities, and a pivotal Canadian privacy ruling involving Facebook. Gain insights into social media security from the past and see how much has (or hasn’t) changed. Don’t miss out on this informative episode on web application security, user privacy, and the efforts to keep social media safe. ** Links mentioned on the show ** Original show notes from episode 2 of the “Social Media Security…
Bre Schumacher // As I was walking through the back to school display at the store the other day, I picked up a handy-dandy school supply list. Of course there were all the usual things: scissors, glue, notebooks, etc. but it made me wonder what would be on the “supply list” for someone just starting out in the infosec field. So I asked one of our testers, Jordan, to help create such a list! For those of you who are starting a new chapter venturing into information security, here is your unofficial “official supply list.” And for anyone who’s been around…
As cyberattacks on retailers in the United Kingdom continue to surge, insurers are rethinking how they approach cyber insurance for the retail sector. With the frequency and sophistication of these attacks on the rise, underwriters are contemplating a significant increase in premiums—by as much as 10 percent—or, in some cases, reconsidering whether to issue policies for retail businesses at all.Over the past two to three weeks, high-profile retailers such as Harrods, Marks and Spencer, and Co-Op have fallen victim to cyberattacks, with the incidents occurring within just a few days of each other. These attacks serve as a stark reminder…