Author: HackWatchit

Prioritize what matters. Secure what counts. We’re excited to announce a powerful new integration between Mend.io and Microsoft Defender for Cloud (MDC)—a step forward in our mission to bring intelligent, actionable, and context-rich open source security directly into the cloud security workflow. As organizations embrace cloud-native architectures, security teams face the growing challenge of identifying and prioritizing the open source software risks that truly matter. Our new integration meets that challenge head-on—by embedding Mend.io’s advanced Software Composition Analysis (SCA) and reachability analysis directly within Microsoft’s CNAPP platform. What’s new? This integration enables Defender for Cloud users to: See Mend.io SCA…

Bitwarden launched Access Intelligence, a set of new capabilities that enables enterprises to proactively defend against internal credential risks and external phishing threats. Access Intelligence introduces two core functionalities: Risk Insights, which allows IT teams to identify, prioritize, and remediate at-risk credentials; and Advanced Phishing Blocker, which alerts and redirects users away from known phishing sites in real-time, using a continuously updated open source blocklist of malicious domains. This approach enables better protection for users as bad actors increasingly leverage AI to craft more convincing phishing lures and evade detection. Empower teams to act, remediate, and prevent threats The Risk…

Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024 Pierluigi Paganini April 29, 2025 Google tracked 75 zero-day flaws exploited in 2024, down from 98 in 2023, according to its Threat Intelligence Group’s latest analysis. In 2024, Google tracked 75 exploited zero-day vulnerabilities, down from 98 in 2023 but up from 63 in 2022. The researchers from Google Threat Intelligence Group (GTIG) observed that most targeted are end-user platforms, though attacks on enterprise tech are rising. The report published by GTIG highlights evolving attacker tactics, better vendor defenses, and growing challenges in detecting commercial surveillance activity.…

Windscribe, a globally used privacy-first VPN service, announced today that its founder, Yegor Sak, has been fully acquitted by a court in Athens, Greece, following a two-year legal battle in which Sak was personally charged in connection with an alleged internet offence by an unknown user of the service. The case centred around a Windscribe-owned server in Finland that was allegedly used to breach a system in Greece. Greek authorities, in cooperation with INTERPOL, traced the IP address to Windscribe’s infrastructure and, unlike standard international procedures, proceeded to initiate criminal proceedings against Sak himself, rather than pursuing information through standard…

Raymond Felch // Being an embedded firmware engineer for most of my career, I quickly became fascinated when I learned about reverse engineering firmware using JTAG.   I decided to take on this project as an opportunity to learn more about this somewhat obscure and often overlooked attack vector. excerpt from: https://en.wikipedia.org/wiki/JTAG JTAG (named after the Joint Test Action Group which codified it) is an industry-standard for verifying designs and testing printed circuit boards after manufacture. JTAG implements standards for on-chip instrumentation in electronic design automation (EDA) as a complementary tool to digital simulation. It specifies the use of a…

(AI) capabilities and autonomy are growing at an accelerated pace in Agentic Ai, escalating an AI alignment problem. These rapid advancements require new methods to ensure that AI agent behavior is aligned with the intent of its human creators and societal norms. However, developers and data scientists first need an understanding of the intricacies of agentic AI behavior before they can direct and monitor the system. Agentic AI is not your father’s large language model (LLM) — frontier LLMs had a one-and-done fixed input-output function. The introduction of reasoning and test-time compute (TTC) added the dimension of time, evolving LLMs…

CrowdStrike has joined Google Cloud in a shared commitment to foster an open and interoperable AI security ecosystem through the Model Context Protocol (MCP), which is built to transform how AI models interact with cybersecurity platforms. This collaboration will enable seamless integration between the CrowdStrike Falcon® cybersecurity platform and AI models through standardized MCP servers. As part of this collaboration, we will work with Google to explore the development of a CrowdStrike-authored MCP server that enables customers to safely harness AI capabilities with their security data while minimizing the risks of unauthorized or incorrect implementations. This collaboration helps set the…

Employee benefits administration firm VeriSource Services is warning that a data breach exposed the personal information of four million people.  VeriSource is a Texas-based employee benefits administration and HR outsourcing solutions provider with diverse clients across the U.S. The firm has begun data breach notifications to impacted individuals about a cybersecurity incident that occurred in February 2024, but the impact of which it took them until April 2025 to evaluate. According to VeriSource’s investigation, the incident exposed sensitive information to external threat actors. “On February 28, 2024, VSI became aware of unusual activity that disrupted access to certain systems,” reads…

What is also clear from the documents is that US police are aware of the control corporations have over their ability to acquire vehicle location data, expressing fears that they could abruptly decide to kill off certain capabilities at any time.In a letter sent in April 2024 to the Federal Trade Commission, US senators Ron Wyden and Edward Markey—Democrats from Oregon and Massachusetts, respectively—noted that a range of automakers, from Toyota, Nissan, and Subaru, among others, are willing to disclose location data to the government in response to a subpoena without a court order. Volkswagen, meanwhile, had its own arbitrary…