Author: HackWatchit

Since November, there have been 15 reported nation state attacks worldwide by hacking organizations inside Russia and China. The Center for Strategic and International Studies (CSIS) has a running list of significant cyber incidents since 2006. Most recently in January, CSIS said there were reports of Russian hackers going after Italian diplomats and Chinese groups going after Taiwan’s government systems and telecommunications infrastructure, just to name two examples. Federal agencies and critical infrastructure providers are not immune to these threats either. The  Treasury Department’s recent cyber troubles and other similar incidents are forcing these organizations to address this ever increasing…

Job scams are on the rise. And asking the right questions can help steer you clear of them.  That rise in job scams is steep, according to the U.S. Federal Trade Commission (FTC). Recent data shows that reported losses have grown five times over between 2020 and 2024. In 2024 alone, reported losses hit half a billion dollars, with unreported losses undoubtedly pushing actual losses yet higher.  Last week, we covered how “pay to get paid” scams account for a big chunk of online job scams. Here, we’ll cover a couple more that we’ve seen circulating on social media and…

Penetration Tester. Developer. Pure GNU/Linux Phone Enthusiast. This blog will cover how to root an AVD emulator and a physical Pixel 6. But before we cover those topics, let’s cover what it is we will be doing and some of the pro/cons of rooting an Android phone. First – What is rooting? Rooting an Android device is a term used for bypassing device restrictions and becoming superuser — often called the “root user,” or just “root.” As superuser, user will have access to system level resources and have greater access on the device. Second – Why would I want to…

The popular xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack Pierluigi Paganini April 23, 2025 The xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack aimed at stealing users’ private keys. Threat actors compromised the Ripple cryptocurrency npm JavaScript library xrpl.js to harvest users’ private keys. xrpl.js is the recommended library for integrating a JavaScript/TypeScript app with the XRP, it has more than 140.000 weekly downloads. Hundreds of thousands of applications and websites use this package, the package has been downloaded over 2.9 million times to date. On April 21, Aikido Intel detected that the official xrpl NPM package…

How to Prevent Network Attacks There are many different ways to defend against network-related threats. Here are five of the most effective methods. 1. Install antivirus software. One of the first lines of defense against malware and other viruses is to install antivirus software on all devices connected to a network (Roach & Watts, 2021). Antivirus software can detect and prevent malicious files from being installed on a system, and it should be updated regularly to include the latest definitions. 2. Create strong passwords. Another essential step in protecting a network is to create strong passwords. Passwords should be at…

, a cooperation partner casually approached me with an AI use case at their organization. They wanted to make their onboarding process for new staff more efficient by using AI to answer the repetitive questions of newcomers. I suggested a practical chat approach that would integrate their internal documentation, and off they went with an air of confidence, planning to “talk to their IT team” to move forward. From experience, I knew that this kind of optimism was brittle. The average IT team isn’t equipped to implement a full end-to-end Ai Application on their own. And so it was: months…

In a team-up of crypto and TradFi giants, Tether, Bitfinex, Cantor Fitzgerald, and SoftBank Group announced Wednesday that they will team up to launch Twenty One, a publicly traded, Bitcoin-centric company that plans to launch with a treasury of more than 42,000 BTC—or about $3.9 billion worth.Tether and Bitfinex will be majority owners, with a minority stake owned by investment holding firm SoftBank. Twenty One will be launched through a planned SPAC merger with Cantor Equity Partners, which trades on the Nasdaq under the ticker CEP and is affiliated with financial services firm Cantor Fitzgerald.In addition to amassing Bitcoin in…

Enhanced Data Protection With AI Guardrails With AI apps, the threat landscape has changed. Every week, we see customers are asking questions like: How do I mitigate leakage of sensitive data into LLMs?How do I even discover all the AI apps and chatbots users are accessing?We saw how the Las Vegas Cybertruck bomber used AI, so how do we avoid toxic content generation?How do we enable our developers to debug Python code in LLMs but not “C” code? AI has transformative potential and benefits. However, it also comes with risks that expand the threat landscape, particularly regarding data loss and…

Tel Aviv, Israel, April 23rd, 2025, CyberNewsWire Lattica, an FHE-based platform enabling secure and private use of AI in the cloud, has emerged from stealth with $3.25 million in pre-seed funding. The round was led by Konstantin Lomashuk’s Cyber Fund, with participation from angel investor Sandeep Nailwal, co-founder of Polygon Network and Sentient: The Open AGI Foundation, among others. Lattica’s technology represents a critical new standard for industries such as healthcare, finance, and government sectors, where data privacy and security concerns have limited AI adoption. According to Cisco’s 2025 AI Briefing: CEO Edition, 70% of CEOs surveyed admitted being concerned…