Author: HackWatchit
Democratic U.S. senator for Georgia Jon Ossoff said President Donald Trump’s invitation to top meme coin holders constitutes an “impeachable offense.” Answering a question from a town hall meeting attendee on Friday, Ossoff said:“He is granting audiences to people who purchase the memecoin that directly enriches him.”Ossoff was referring to the gala dinner invite announced on Wednesday for the 220 top holders of the Trump memecoin.Ossoff said that the move constitutes “selling access for what are effectively payments” made “directly” to Trump. Therefore, it undeniably “rises to the level of an impeachable offense, and the reality is that that’s just…
Why Does Secrets Rotation Matter in Cybersecurity? Secrets rotation, a cybersecurity best practice, is a procedure to refresh and modify privileged credentials regularly. It’s a critical facet of managing Non-Human Identities (NHIs) and their associated secrets, a fundamental component of contemporary cybersecurity strategies. But why does it hold such significance? NHIs, or machine identities, complement human identities. They are the product of a unique Secret, such as an encrypted password or token, combined with permissions granted by a destination server. Just like a tourist with a passport, these NHIs require management, both in terms of their identity and their credentials.…
AI is no longer the technology of tomorrow; it’s today’s most pressing business opportunity. According to recent findings from Semarchy, an overwhelming 75% of organisations plan to invest in AI technologies in 2025 alone. This surge in interest reflects AI’s potential to transform operations, streamline decision-making, and unlock new competitive advantages. But with this accelerated adoption comes a challenge that threatens to stall progress — the need for trustworthy, well-governed data. The disconnect between ambition and readiness The reality is clear — quality data hasn’t kept pace with the speed of AI deployment. While leaders push forward with ambitious AI…
Vanta announced new ways to help organizations demonstrate AI security and evaluate AI risk across their ecosystem. With the launch of Vanta’s new AI Security Assessment offering, customers using, developing or building with AI can now more effectively address critical considerations and proactively strengthen their AI security posture. As AI evolves and becomes increasingly ubiquitous, demonstrating secure practices and managing vendor risk are critical for maintaining trust. According to Vanta’s State of Trust report, 62% of organizations plan to invest more in AI security in 2025, but only 36% of organizations have, or are in the process of putting a…
The new ETSI TS 104 223 specification for securing AI provides reliable and actionable cybersecurity guidance aimed at protecting end users. Adopting a whole-lifecycle approach, the framework outlines 13 core principles that expand into 72 detailed, trackable principles across five key phases of the AI lifecycle, all designed to enhance the overall security of AI systems. The specification details transparent, high-level principles and provisions for securing AI. It provides stakeholders in the AI supply chain—from developers and vendors to integrators and operators—with a robust set of baseline security requirements, helping to protect AI systems from evolving cyber threats. AI presents…
African multinational telco giant MTN Group disclosed a data breach Pierluigi Paganini April 26, 2025 African multinational telecommunications company MTN Group disclosed a data breach that exposed subscribers’ personal information. MTN Group Limited is a South African multinational telecommunications company headquartered in Johannesburg. Founded in 1994, it has grown to become Africa’s largest mobile network operator, serving over 290 million subscribers across 18 countries in Africa and the Middle East. MTN offers a range of services including voice, data, digital, fintech, and enterprise solutions. The company is also expanding into areas like mobile money and digital entertainment, aiming to become…
Ray Felch // Disclaimer: Be sure to use a faraday bag or cage before transmitting cellular data so you don’t accidentally break any laws by illegally transmitting on regulated frequencies. Additionally, intercepting and decrypting someone else’s data is illegal, so be careful when researching your phone traffic. Some useful terminology: Mobile Phone Related: MS mobile station (phone) SIM subscriber identity module (sim card) IMSI international mobile subscriber identity (subscriber ID) TMSI temporary IMSI (helps with privacy by obfuscating ISMI) Ki 128-bit unique subscriber key (paired with IMSI) Tower Related: BTS base transceiver station (contains the equipment…
A critical vulnerability (CVE-2025-31324) in SAP NetWeaver Visual Composer puts systems at risk of full compromise. Learn how to check if your SAP Java systems are affected and the immediate steps to take. A serious security vulnerability, identified as CVE-2025-31324, was discovered in SAP NetWeaver’s Visual Composer development server. This critical issue, scoring a perfect 10.0 in severity, stems from a missing check that should verify if a user has the correct permissions and is being actively exploited, reveals a report from Onapsis Threat Intelligence. Research reveals that the flaw is active on between 50% and 70% of existing SAP…
The World Economic Forum (WEF), in collaboration with the Global Cyber Security Capacity Centre (GCSCC) at the University of Oxford, released the Cyber Resilience Compass: Journeys Towards Resilience report on Thursday. The practical guide is designed to help organizations develop stronger cyber resilience strategies and navigate today’s increasingly complex threat landscape with confidence. Drawing on frontline practices from leading organizations worldwide, the white paper offers actionable insights to support the creation of more effective and resilient cybersecurity roadmaps. It emphasizes the need to move beyond technical solutions and develop comprehensive strategies that align with business objectives, systemizing front-line practice into…