Author: HackWatchit

The U.S. National Institute of Standards and Technology (NIST) has released a draft update to its Privacy Framework, aligning it more closely with the recently updated Cybersecurity Framework. The changes to the NIST Privacy Framework 1.1 Initial Public Draft (IPD) aim to improve usability and address feedback from stakeholders by refining content and structure. NIST is accepting public comments on the draft through June 13, 2025. The NIST Privacy Framework 1.1 IPD has been developed in response to stakeholder interest in an updated framework that better reflects current privacy risk management needs. Key goals of the update include aligning the…

Keeping up with crypto tax laws in Europe feels like a constant hurdle. Regulations evolve, tax authorities demand precise reporting, and tracking every trade across multiple exchanges can feel challenging. Filing mistakes could lead to hefty fines, making accurate tax reporting more important. The right crypto tax software takes the stress out of the process, helping you automate calculations, generate reports, and stay compliant with local tax rules.  But with so many options available, how do you choose the best one for 2025? Not all tax software is built the same. Some offer exchange integrations, while others provide in-depth tax…

The Cybersecurity and Infrastructure Security Agency has cancelled a contract project aimed at filling talent gaps by improving the recruitment and retention of people with autism and other neurodivergent conditions. The contract’s termination upends a years-long effort, started under the first Trump administration, to recognize neurodiversity across the federal government. Data from CISA’s pilot project would have helped inform broader efforts to fill talent gaps at the Department of Homeland Security and across agencies. DHS terminated the Cybersecurity and Infrastructure Security Agency’s “neurodiverse federal workforce” contract with MITRE on Jan. 23. In the public notice, DHS and CISA gave little…

Cato Networks introduced GenAI security controls for Cato CASB (Cloud Access Security Broker). Cato CASB, a native feature in the Cato SASE Cloud Platform, is now enhanced with new capabilities for GenAI applications including a shadow AI dashboard and policy engine. With the shadow AI dashboard, enterprises can detect, analyze, and gain insights into the use of GenAI. With the policy engine, enterprises can take control of user activities in GenAI applications. Combined, Cato is enabling security and IT teams to balance innovation with risk management. GenAI has rapidly become a go-to tool for employees to enhance productivity and automate tasks. However,…

Gladinet flaw CVE-2025-30406 actively exploited in the wild Pierluigi Paganini April 15, 2025 Huntress reports active exploitation of Gladinet CVE-2025-30406 in the wild, affecting seven organizations and 120 endpoints. Security researchers at Huntress warn of attacks in the wild exploiting a critical vulnerability, tracked as CVE-2025-30406, in Gladinet CentreStack and Triofox software. The vulnerability CVE-2025-30406 (CVSS score 9.0) is a deserialization issue due to the CentreStack portal’s hardcoded machineKey use. Threat actors exploited the flaw in March attacks. The vulnerability has been addressed in version 16.4.10315.56368 released on April 3, 2025. “The application uses a hardcoded or improperly protected machineKey in the IIS web.config…

Kent Ickler // TL;DR Want a quick fix?  Almost every marketing platform we’ve seen has decent tutorials on authorizing outbound email with SPF and DKIM authorization. If you’re a marketing arm of your organization or are a mass marketing company and cherish the absolute brilliance of Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM), and Domain-based Message Authentication, Reporting and Conformance (DMARC): stop now.  This isn’t for you.  You already know what I have to say. Bottom line: This is subject to individual server configuration, but generally speaking, the more you can prove to a recipient mailserver that an email…

Smart TVs can be convenient, but many collect and share a ton of data with third parties (e.g., the manufacturer, ad agencies), often without you knowing. If you’re worried about your privacy, learning how to stop your smart TV from spying on you can help you regain control. Below, we’ll explore some telltale signs your smart TV has been hacked and is monitoring you. Then we’ll cover how to reduce built-in tracking, from disabling data collection features and managing app permissions, to using a VPN (including recommendations) and more. How to know if your smart TV is spying on you…

In 2023, the Federal Trade Commission (FTC) released a warning to five of the most popular tax preparation companies, stating they could face civil penalties if they used confidential data collected from consumers – for unrelated purposes. Two years after the warning was published, an even greater concern has emerged — the integrity of the tax prep companies’ software. Gartner predicts that by this year, 45% of organizations worldwide will have experienced attacks on their software supply chains. If compromised, for tax prep businesses and their customers, the consequences of a software supply chain attack could be devastating. The potential…

As data , we’re comfortable with tabular data… Tabular data. Image by Author. We can also handle words, json, xml feeds, and pictures of cats. But what about a cardboard box full of things like this? (Image by Annie Spratt, Unsplash) The info on this receipt wants so badly to be in a tabular database somewhere. Wouldn’t it be great if we could scan all these, run them through an LLM, and save the results in a table? Lucky for us, we live in the era of Document Ai. Document AI combines OCR with LLMs and allows us to build…