Author: HackWatchit

In brief Mattel has halted its Hot Wheels NFT drops, ending new releases “for the foreseeable future.” Marketplace and community features will stay online through at least 2025. The company said that it’s exploring future features, including NFT transfers and long-term strategy. Mattel has hit pause on its flagship Hot Wheels Virtual Garage NFT program, announcing there will be no further releases of new NFT series or feature drops “for the foreseeable future,” as the toy giant reconsiders the long-term future of its digital collectibles.“As we evaluate the changing world of virtual collectibles, we’ve determined the time has come to…

According to the 2023 edition of the Verizon Data Breach Investigations Report, over 83% of breaches come from outside the organization. Yet despite this large majority, many organizations have no complete inventory of their externally exposed assets, much less the knowledge of if they are potentially vulnerable. The key to solving this problem is to deploy a security technology known as external attack surface management (EASM), and to make sure to avoid three well-understood pitfalls in deployment. I’ll draw upon CyCognito’s experience in deploying EASM over the past five years to explain pitfalls to avoid in order to make your…

CISOs know cyber risk is business risk. Boards don’t always see it that way.​ For years, CISOs have struggled to get boards to understand security beyond buzzwords. Many feel they’re either ignored or misunderstood. But with threats growing and regulations tightening, that’s changing. Boards now expect CISOs to speak their language: risk, dollars, impact.​ Here’s how security leaders can get through, with real-world tips on making cybersecurity resonate in the boardroom. Translate risk into dollars The board isn’t full of technologists. Most members come from finance, legal, or operations. They think in terms of business performance, liability, and shareholder value.​…

In an era where cybercrime is rapidly evolving, security professionals and hackers alike have found new, innovative ways to conceal malicious activity. One of the more alarming techniques to emerge in recent years is steganography—the art and science of hiding information within seemingly innocent files or messages. While steganography has legitimate uses, such as secure communication or watermarking, its potential for abuse has led to an increase in cyber threats, making it an emerging and potent danger in the cybersecurity landscape. What is Steganography? Steganography, derived from the Greek words “steganos” (meaning hidden) and “graphy” (meaning writing), is the practice…

Sansec uncovered a supply chain attack via 21 backdoored Magento extensions Pierluigi Paganini May 05, 2025 Supply chain attack via 21 backdoored Magento extensions hit 500–1,000 e-stores, including a $40B multinational. Sansec researchers reported that multiple vendors were hacked in a coordinated supply chain attack, the experts discovered that a backdoor was hidden in 21 applications. Curiously, the malicious code was injected 6 years ago, but the supply chain attack was discovered this week after the threat actors compromised the e-commerce servers. The researchers believe the attack compromised between 500 and 1000 e-stores using the backdoored extensions. Alexandra Zota first…

Webcast – Recorded: 2/3/2019 w/ John Strand and Beau Bullock Take a good look at Bitcoin right now… these are the unlucky ones. These are the unfortunate souls who jumped on another overinflated balloon. But, does this Bitcoin crash completely undermine all blockchain technologies? Since Bitcoin is crashing and burning we figured it would be a good time to have a webcast on blockchain security issues and why blockchain still matters.   Is it all hype? Is it all just a slow-motion train wreck? Why, exactly, should a security practitioner care?  There are so many cool applications, and more than a…

The number and variety of devices and processes pinging applications and databases make visibility an essential part of getting to zero trust. “If you can’t see what’s going on in your environment, you can’t respond appropriately, and that’s when bad things happen,” said Micheal Farmer, a security solutions architect at Splunk. Real-time visibility gives cyber practitioners the knowledge they need to know what data they need to address to more effectively manage their environments, Farmer said during Federal News Network’s Accelerate Together: Zero Trust 2025. “The top concerns I’m hearing are around insider threat, cloud security, real-time threat detection and…

Effective Vulnerability Management offers a view of a key part of cybersecurity, showing how practices, tools, and processes can help organizations reduce risk. About the authors Chris Hughes is the President of Aquia, a cybersecurity leader with 20 years of public and private sector experience, who also serves as a professor, and CISA Cyber Innovation Fellow. Nikki Robinson is a Security Architect and Professor of Practice at Capitol Technology University, with dual doctorates in Cybersecurity and Human Factors. Inside the book The book starts with a reality check. The authors point out that many organizations face huge backlogs of known…

The creators of StealC, a widely-used information stealer and malware downloader, have released its second major version, bringing multiple stealth and data theft enhancements. The latest version of StealC was actually made available to cybercriminals in March 2025, but Zscaler researchers who analyzed it just published a detailed write-up. In the weeks that followed its release, several minor bug fixes and point releases added new features, with the latest being version 2.2.4. StealC is a lightweight info-stealer malware that gained traction on the dark web in early 2023, selling access for $200/month. In 2024, it was spotted in large-scale malvertising…