Author: HackWatchit

In today’s digital age, cyberattacks are becoming increasingly sophisticated, with hackers targeting not only financial information or personal identities but also more intimate and sensitive data—genetic data. While we have long been aware of the risks to personal information like passwords, social security numbers, and financial records, few have considered the growing value and vulnerability of genetic information. However, as genomic testing becomes more widespread and personal genetic databases expand, this type of data is emerging as a prime target for hackers. The Rise of Genetic Data Collection Over the past decade, advancements in genetic research and the popularity of…

Beyond Silos By Dan Cole, VP of Product Marketing, ThreatConnect We know that attackers are outpacing defenders: we’ve all heard the cliche that “attackers only need to get it right once, defenders need to get it right every time.” However, we believe that this is approaching a tipping point: the growth of the attack surface area with cloud adoption and increasing reliance on supply chains time the increasing complexity of cyberattacks thanks to AI tools are going to result in exponential growth when compared to linear advancements in defense that are hampbered my talent shortages and tiny budget increases. You…

Date: April 17, 2025Time: 3:30 PM CEST | 9:30 AM EDT | 7:00 PM ISTTopic: How Web Protocol Weaknesses Enable Layer 7 DoS Attacks Watch Now Abstract: This webinar explores the inherent vulnerabilities within the design of web protocols that indirectly expose web pages to Layer 7 denial-of-service (DoS) attacks, regardless of the encryption protocol employed (e.g., ICP, WTLS, DTLS, TLS 1.2, TLS 1.3, or QUIC). Initially, it will focus on the weaknesses of the Internet Cache Protocol (ICP), illustrating how these vulnerabilities can be weaponized to circumvent security measures. The discussion will then extend to the vulnerabilities residing within the…

In brief Bitcoin ETFs logged $381.4 million in net inflows Monday, the biggest single-day gain since January 30 Inflows were led by ARKB and FBTC. Analysts said Bitcoin is acting more like a macro asset as institutions return. Bitcoin exchange-traded funds (ETFs) just notched their strongest single-day performance in nearly three months, with institutional money pouring back into the space after weeks of muted flows.On Monday, Bitcoin ETFs collectively recorded $381.3 million in net inflows, their largest daily total since January 30, as per data from UK-based investment management firm Farside Investors.The inflows mark a notable shift after weeks of…

Abilene city, Texas, takes systems offline following a cyberattack Pierluigi Paganini April 22, 2025 Abilene, Texas, shut down systems after a cyberattack caused server issues. IT staff and experts are investigating the security incident. Abilene, Texas, shut down systems after a cyberattack caused server issues. The incident occurred on April 18, 2025, emergency services remained operational, and no financial irregularities were found. “On April 18, 2025, City officials received reports of unresponsive servers within our internal network and immediately began executing our incident response plan and disconnecting affected and critical assets to secure our systems.” reads the notice of security…

Proofpoint has unveiled the global availability of Proofpoint Prime Threat Protection, the human-centric cybersecurity solution that brings together previously disparate critical threat defense capabilities—protection against multistage attacks across digital channels, impersonation protection, and risk-based employee guidance and education—in a single integrated solution. As organizations face an overwhelming array of fragmented, siloed and reactive cybersecurity tools, Proofpoint Prime is the integrated solution that unifies threat defense and human risk management into seamless workflows that span the full attack chain. Proofpoint Prime consolidates real-time threat detection, response, and behavior-based guidance across communication and digital channels to lower operational overhead and costs, accelerate…

Phishing remains one of the most pervasive and costly threats in cybersecurity. In 2024, phishing attacks surged by 202%, with credential-based phishing increasing by 703%, according to The 2024 Phishing Intelligence Report. These attacks are not only more frequent but also more sophisticated, leveraging AI to craft highly convincing messages that bypass traditional security measures.​ And no organization is immune, not even the giants. In late 2023, both MGM Resorts and Caesars Entertainment were hit by highly targeted phishing attacks. The attackers, posing as IT staff, tricked employees into revealing credentials, leading to widespread system disruption at MGM and a reported $15 million ransom paid…

Threat actors are exploiting bulletproof hosting service Proton66 for malicious activities, including campaigns from SuperBlack ransomware operators, Android malware distribution via hacked WordPress, targeted attacks using XWorm and Strela Stealer, and potential connections to Chang Way Technologies. Cybersecurity experts at Trustwave’s SpiderLabs have discovered an increase in malicious online activities originating from a Russian “bulletproof” hosting provider known as Proton66. These services, often favoured by cybercriminals due to their relaxed policies, have been linked to a wave of attacks targeting organizations worldwide since January 8, 2025. Researchers have detailed their findings in a two-part series. The first part highlights a…

In a rather clever attack, hackers leveraged a weakness that allowed them to send a fake email that seemed delivered from Google’s systems, passing all verifications but pointing to a fraudulent page that collected logins. The attacker leveraged Google’s infrastructure to trick recipients into accessing a legitimate-looking “support portal” that asks for Google account credentials. The fraudulent message appeared to come from “no-reply@google.com” and passed the DomainKeys Identified Mail (DKIM) authentication method but the real sender was different. Fake email with Google’s DKIM stamp Nick Johnson, the lead developer of the Ethereum Name Service (ENS), received a security alert that…