Author: HackWatchit

ClickFunnels is investigating a data breach after hackers leaked detailed business data, including emails, phone numbers, and company profiles. A hacking group calling itself “Satanic” claims to have breached ClickFunnels, a popular US-based software platform used by marketers and entrepreneurs to build sales funnels. The group is known for using BreachForums to announce its breaches but since the forum is down; it made the announcement via Telegram, claiming that data from the company was stolen on April 29, 2025. In their post, the hackers alleged that they accessed ClickFunnels through a third party and published details of what they say…

Craig is a former software developer and red teamer. He has been pentesting at Black Hills Infosec since 2018. Artificial Intelligence (AI) has been a hot topic in information technology and information security since before I entered the industry. Developments in AI are something that I had been aware of, but I hadn’t chosen to really dive into the subject in terms of leveraging AI as part of my job as a penetration tester. I gave a webcast on penetration testing methodology a while back, and someone asked me afterward how I use AI in my methodology/workflow. At the time,…

After an intense six-year legal battle, Meta, the parent company of Facebook, has emerged victorious in its fight against the Israeli cybersecurity firm NSO Group, developers of the notorious Pegasus malware. A Californian jury has awarded Meta a hefty $168 million penalty against NSO Group for the malicious targeting of its users, specifically those on WhatsApp and Instagram. This decision comes after a detailed investigation conducted by Meta in collaboration with Citizen Lab, which revealed that the spyware infiltrated over 1,400 users of the WhatsApp messaging platform.In addition to the $168 million penalty, the court also mandated NSO Group to…

Date: April 30, 2025Time: 9:30 AM EDT | 8:30 AM CDT | 7:00 PM ISTTopic: Compliance to Security: Moving Beyond Checkboxes Watch Now Abstract: In today’s complex cybersecurity landscape, compliance frameworks serve as the foundation of an organization’s digital security infrastructure. However, many regulatory policies are implemented at only a basic level, merely meeting minimum requirements. As cyber threats continue to evolve, developing and implementing security frameworks with a strong focus on proactive risk management is essential for ensuring long-term resilience and protection. This webinar explores the development and implementation of a risk management framework that is both compliant with standard…

In brief Ethereum’s Pectra upgrade was successfully implemented but didn’t boost ETH’s price, which continues trading at $1,830, 40% lower than last year. Despite excitement around the upgrade’s 11 improvement proposals, analysts note Ethereum updates often act as “sell the news” events, similar to what happened after “The Merge” in 2022. Markets appear more focused on the Federal Reserve’s interest rate decision than on Ethereum’s technical improvements, with CME FedWatch indicating a 95.6% chance rates will remain unchanged. Ethereum’s Pectra upgrade went live without a hitch—but it didn’t serve as rocket fuel for ETH’s price.The world’s second-largest cryptocurrency was trading…

Unsophisticated cyber actors are targeting the U.S. Energy sector Pierluigi Paganini May 07, 2025 CISA, FBI, EPA, and DoE warn of cyberattacks on the U.S. Energy sector carried out by unsophisticated cyber actors targeting ICS/SCADA systems. The US cybersecurity agency CISA, the FBI, EPA, and the DoE issued a joint alert to warn of cyberattacks targeting US-based organizations in the oil and natural gas sector. Unsophisticated threat actors are targeting ICS/SCADA systems in U.S. energy and transport sectors, exploiting poor cyber hygiene to cause major disruptions. The researchers observed that attackers are using “basic and elementary intrusion techniques.” “CISA is…

Barracuda Networks unveiled next-generation threat detection capabilities fueled by multimodal AI. Barracuda now delivers adaptive, context-aware protection against emerging attacks with accuracy and speed by simultaneously correlating and analyzing diverse text and visual data types – including URLs, documents, images, QR codes, and more. The new capabilities build on Barracuda’s long-standing use of AI and machine learning, with new integration of multimodal AI – technology that synthesizes and interprets numerous data streams in various formats – with its machine learning classifiers and purpose-built sandbox engine. This creates a faster, smarter and more adaptive defense layer, empowering Barracuda to detect more…

Amazon debuted Vulcan, a fulfillment center robot with a sense of touch, according to a Wednesday (May 7) blog post. The average robot is “numb and dumb,” particularly those operating in commercial settings, Aaron Parness, Amazon director of applied science, said in the post. “In the past, when industrial robots have unexpected contact, they either emergency stop or smash through that contact,” he said. “They often don’t even know they have hit something because they cannot sense it.” Vulcan is built using advances in robotics, engineering and physical artificial intelligence to do its job, per the post. While it’s not…

Austin, USA / Texas, May 7th, 2025, CyberNewsWire SpyCloud, the leading identity threat protection company, today released an analysis of nearly 6 million phished data records recaptured from the criminal underground over the last six months. Phishing attacks have been growing in scale and sophistication, and SpyCloud’s research reveals that cybercriminals are increasingly targeting high-value identity data that can be used for follow-on attacks like ransomware, account takeover, and fraud.  While the data reflects only a snapshot of the phishing threat landscape, it provides valuable insights for organizations seeking to bolster defenses, enhance user training, and prevent identity-based attacks.  Key…