Author: HackWatchit

Welcome to our Behind the Startup series, where we explore groundbreaking innovations in the Web3 space. Today, we have Alex Loktev, CRO at P2P.org, a leading blockchain infrastructure provider that has managed over $10 billion in staked and restaked assets across more than 40 blockchain networks. In this interview, Alex shares insights into the strategic vision, security innovations, and Ethereum Pectra upgrade, providing a deep dive into the future of PoS staking. Ishan Pandey: Hi Alex Loktev, CRO at P2P.org, welcome to our “Behind the Startup” series. Since launching in 2018, P2P.org has managed over $10 billion in staked and…

New York prosecutors say that two people working at a third-party contractor for the StubHub online ticket marketplace made $635,000 after almost 1,000 concert tickets and reselling them online. As the prosecutors explain, the vast majority of stolen tickets were for Taylor Swift’s Eras Tour. However, the criminals also targeted other high-value and high-profile events, including Ed Sheeran concerts, Adele concerts, NBA games, and the US Open Tennis Championships. The two defendants, 20-year-old Tyrone Rose and 31-year-old Shamara Simmons, worked for Sutherland Global Services in Jamaica and stole the tickets by allegedly intercepting approximately 350 StubHub orders by exploiting a loophole…

Armis, a cyber exposure management and security company, announced Thursday that it has acquired OTORIO, a provider of OT (operational technology) and CPS (cyber physical systems) security. OTORIO’s Titan platform will be integrated into Armis’ Centrix cloud-based cyber exposure management platform to expand Armis’ OT/CPS suite and offer an on-premises CPS solution for organizations or segments of an organization’s environment that are airgapped or sequestered from online access. “We are seeing unprecedented demand across all industries but for some specific verticals, customers require a hybrid environment for complete protection,” said Yevgeny Dibrov, CEO and co-founder of Armis. “Through this acquisition,…

The growing demand for securing IoT devices presents a significant challenge for developers and manufacturers. Many struggle to implement security measures that fall outside their core expertise, often addressing security concerns only in the later stages of development. As a result, numerous IoT devices remain vulnerable, posing potential security risks to organizations. To mitigate these risks, governments and regulatory bodies are introducing mandatory security requirements, such as the EU Cyber Resilience Act (CRA). These regulations compel manufacturers to integrate robust security mechanisms directly into their devices. In response, we are committed to working closely with device manufacturers to enhance the…

Socket exposes a typosquatting campaign delivering malware to Linux and macOS systems via malicious Go packages. Discover the tactics used, including obfuscation and domain typosquatting, and learn how to stay safe. Cybersecurity researchers at software supply chain security solutions provider, Socket, have uncovered a concerning new trend where malicious actors are increasingly targeting developers within the Go programming language network. By employing a technique known as typosquatting, these attackers distribute malware disguised as legitimate Go packages, which are designed to install hidden malware loaders on Linux and macOS systems. Socket’s investigation, shared with Hackread.com, shows that the attackers have published…

The U.S. DoJ charges 12 Chinese nationals for state-linked cyber operations Pierluigi Paganini March 06, 2025 The U.S. Department of Justice (DoJ) charges 12 Chinese nationals for their alleged involvement in state-linked cyber operations. The U.S. DoJ charged 12 Chinese nationals, including PRC security officers, employees of the hacking firm i-Soon, and members of the APT27 group (aka Emissary Panda, TG-3390, Bronze Union, and Lucky Mouse), for data theft and suppressing dissent worldwide. “The Justice Department, FBI, Naval Criminal Investigative Service, and Departments of State and the Treasury announced today their coordinated efforts to disrupt and deter the malicious cyber activities of 12 Chinese…

Chris has been working in security for 30 years, mainly doing penetration testing in both consulting and corporate environments. Chris is the author of the Nikto web scanner, founder of the RVAsec conference, and has been involved in many OSS projects and community efforts. If you’ve ever had to take a request from Burp and turn it into a command line, especially for jwt_tool.py, you know it can be painful—but no more! The “Copy For” extension is here to save valuable time. This simple extension allows you to quickly generate command-line syntax for security tools directly from Burp Suite’s context…

Persona announced the next generation of their unified KYC-KYB platform that will combat sophisticated fraud during business onboarding and throughout the business lifecycle. These enhancements deliver insights into both businesses and the individuals behind them, enabling more effective fraud detection compared to traditional single-focus solutions. The rise in business fraud has created significant challenges across industries, from marketplace merchant fraud to fintech application fraud. According to the FTC, business identity theft has reached unprecedented levels, with $752 million in losses from business impersonation reported in 2023 alone. Fraudsters are increasingly targeting business verification processes for their higher potential payouts compared…

In a move to support government strategy and foresight professionals, the International Association for Strategy Professionals (IASP) has announced that all Government Community of Practice (Gov CoP) webinars will be offered free of charge to government employees throughout 2025. Historically, these sessions have required a fee. Now, thanks to newly secured approvals, IASP will provide government professionals with exclusive access to cutting-edge insights, best practices, and expert-led discussions at no cost. How to Access the Free Webinars Government employees interested in attending these webinars can request an exclusive free access code by messaging IASP Gov CoP Co-Chairs Robin Champ, SMP,…