Author: HackWatchit

What: The creation of U.S. Cyber Command When: CYBERCOM was created as a sub-unified command in 2009, but its origins can be traced back to the 1980s. Why it matters: CYBERCOM is in charge of protecting DoD’s information systems and supporting the nation’s efforts to defend critical infrastructure from major cyber threats — its creation allowed the Defense Department to unify cyber operations and strengthen its cyber capabilities. To celebrate our 25th anniversary in 2025, we’re spotlighting 25 pivotal moments that reshaped the way the government operates. Visit our anniversary page each week as we look back on these defining…

A misconfigured, non-password-protected database belonging to TicketToCash exposed data from 520,000 customers, including PII and partial financial details. Cybersecurity researcher Jeremiah Fowler recently discovered a 200GB openly accessible misconfigured database containing over 520,000 records. This exposed database belonged to customers of TicketToCash, a platform for reselling event tickets. According to Fowler’s report, shared with Hackread.com, it isn’t just about names and email addresses; the data exposure includes partial credit card numbers and physical addresses linked to concert and event tickets. Additionally, the exposed data included copies of tickets and documents containing Personally Identifiable Information (PII) such as names, email addresses,…

Ethena Labs, the team behind the synthetic dollar USDe, has announced a strategic partnership with the TON blockchain.According to a May 1 statement, this move brings both USDe and its yield-generating counterpart, sUSDe, directly into the Telegram ecosystem.Ethena said:“This represents one of Ethena’s most meaningful launches to date. [Telegram] Users within [in emerging countries] can now all benefit from a globally accessible dollar savings vehicle via Ethena’s USDe right within their Telegram app.”Yield opportunitiesEthena’s integration enables support for USDe inside Telegram’s native wallet and opens the door to stable yield-generating products directly within the chat environment.To kick off adoption, Ethena…

Uber has recently detailed its implementation of a GenAI-powered invoice processing system that significantly enhances operational efficiency. This system has doubled the reduction of manual effort, decreased handling time by 70%, and yielded cost savings of 25-30%. The foundation of this transformation lies in leveraging GPT-4 and a modular platform named TextSense, which has improved data accuracy by 90%. The result is a globally scalable, efficient, and highly automated financial operation. Uber transitioned from legacy Robotic Process Automation (RPA) and Rule-Based Systems (RBS) to Generative AI (GenAI) to tackle increasing complexity and inefficiencies in invoice processing. This advanced solution provides…

Justin Angel// Introduction In penetration testing, ARP is most commonly discussed in terms of poisoning attacks where an attacker achieves a man-in-the-middle (MITM) position between victim nodes by contaminating the ARP cache tables of neighboring hosts. While initially inspired by this technique and the desire to derive a means of passively obtaining a list of candidate targets, this post aims to look at ARP from a data analytics perspective by capturing and quantifying broadcast requests to identify intercommunicating network hosts. The byproduct of this effort is a simple Python tool for Debian Linux called eavesarp that was heavily influenced by…

Coding has been a part of my life since I was 10. From modifying HTML & CSS for my Friendster profile during the simple internet days to exploring SQL injections for the thrill, building a three-legged robot for fun, and lately diving into Python coding, my coding journey has been diverse and fun! Here’s what I’ve learned from various programming approaches. The way I learn coding is always similar; As people say, mostly it’s just copy-pasting. 😅 When it comes to building something in the coding world, here’s a breakdown of my method: Choose the Right Framework or Library Learn…

A new malware campaign targeting WordPress sites employs a malicious plugin disguised as a security tool to trick users into installing and trusting it. According to Wordfence researchers, the malware provides attackers with persistent access, remote code execution, and JavaScript injection. At the same time, it remains hidden from the plugin dashboard to evade detection. Wordfence first discovered the malware during a site cleanup in late January 2025, where it found a modified ‘wp-cron.php’ file, which creates and programmatically activates a malicious plugin named ‘WP-antymalwary-bot.php.’ Other plugin names used in the campaign include: addons.php wpconsole.php wp-performance-booster.php scr.php If the plugin…

Indian Court ordered to block email service Proton Mail Pierluigi Paganini April 30, 2025 Indian Court ordered a nationwide block of the privacy-oriented email service Proton Mail on April 29, 2025, following a legal complaint. Proton Mail is a Swiss-based email service offering end-to-end encryption to ensure that only the sender and recipient can read the messages. Founded in 2013 by scientists from CERN, it operates under Proton AG and is headquartered in Geneva. The company employs client-side encryption, meaning emails are encrypted on the user’s device before being sent to Proton’s servers, enhancing user privacy and security. This approach…

He’s not a pop star, but Jeffrey Bowie is alleged to have toured staff areas of a hospital in Oklahoma, hunting for computers he could install spyware on. We dive into the bizarre case of the man accused of hacking medical networks and then sharing how he did it on LinkedIn. Plus! Move over Nigerian princes — the WASPI scams are here. Fraudsters are now targeting UK women born in the 1950s, exploiting pension injustice for phishing gain. All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole…