Author: HackWatchit

Privacy-focused email provider Tuta (previously Tutanota) and the VPN Trust Initiative (VTI) are raising concerns over proposed laws in France set to backdoor encrypted messaging systems and restrict internet access. The first case concerns a proposed amendment to France’s “Narcotrafic” law, which would compel providers of encrypted communication services to implement backdoors, enabling law enforcement to access decrypted messages of suspected criminals within 72 hours of a request. Non-compliance could result in substantial fines: €1.5 million for individuals and up to 2% of annual global turnover for companies. The law has not yet been put into effect, but the amendment has…

In this Help Net Security interview, David Dumont, Partner at Hunton Andrews Kurth, discusses the implications of the EU AI Act and how organizations can leverage existing GDPR frameworks while addressing new obligations such as conformity assessments and transparency requirements. Dumont also outlines strategies for mitigating risks from national-level enforcement variations and third-party AI vendors. The impact of the AI Act is often compared to that of the GDPR. Do you perceive any fundamental compliance challenges that businesses might not yet understand? When developing our firm’s EU AI Act guide for in-house counsel, we have identified a significant number of…

The Australian Department of Home Affairs has mandated that government entities must prevent the installation of products and web services on government systems and devices from Kaspersky Lab. Additionally, any existing instances must be removed. The directive, issued under the Protective Security Policy Framework (PSPF) by the Secretary of the Department of Home Affairs, aims to manage and mitigate security risks to the Commonwealth. “After considering threat and risk analysis, I have determined that the use of Kaspersky Lab Inc. products and web services by Australian Government entities poses an unacceptable security risk to Australian Government, networks, and data, arising…

SMS-based, two-factor authentication (2FA) has long been a staple security measure for many online services, including Gmail. However, as the tech industry shifts towards more secure authentication methods, it has become evident that SMS codes are no longer the ideal solution. In a recent reveal, a Gmail spokesperson has confirmed that Google is planning to phase out SMS codes for authentication, marking a significant change for billions of users worldwide. This move by Google validates HYPR’s long-held belief that passwords and SMS codes are inherently insecure and susceptible to various attacks. HYPR has been a leader in the passwordless authentication…

In a space dominated by expensive, fragmented solutions, could Walrus be Web3’s breakthrough storage protocol? The world generates over 2.5 quintillion bytes of data daily, yet blockchain’s promise of true decentralization has been bottlenecked by one persistent challenge: efficient, programmable storage. Walrus.xyz, Mysten Labs’ ambitious new protocol is building to redefine how we store and access data in the decentralized era.Decentralized Storage That Actually Works Walrus is building decentralized storage with features like erasure coding for cost efficiency and integration with the high-performance SUI blockchain. Founded by Mysten Labs, the creators of the Sui blockchain, Walrus brings enterprise-grade engineering to…

By Beau Bullock & Steve Borosh TL;DR We built a post-compromise toolset called GraphRunner for interacting with the Microsoft Graph API. It provides various tools for performing reconnaissance, persistence, and pillaging of data from a Microsoft Entra ID (Azure AD) account. Below are some of the main features. At the end of the blog post, make sure to take a peek at the potential attack path scenarios we have laid out. There are a few in there we think may be quite interesting to both offensive and defensive security team members. Main Features: Search and export email Search and export…

The House Chiefs of Staff Association announced today that Hope E. Goins has been elected to serve a third term on its Board of Directors, continuing her influential presence in congressional leadership circles.   Goins, who serves as the Staff Director of the U.S. House of Representatives Committee on Homeland Security as well as a Visiting Fellow at the National Security Institute, has established herself as a top strategist for high-profile congressional investigations and a lead negotiator for transformative legislation throughout her career on Capitol Hill.   “I’m elated to have been elected by a bipartisan body of my peers,” said Goins.   …

A coordinated effort between law enforcement in Thailand, Singapore, and cybersecurity firm Group-IB has led to the arrest of a prolific hacker tied to more than 90 data breaches worldwide. The individual, operating under multiple online identities such as GHOSTR, ALTDOS, DESORDEN, and 0mid16B, reportedly stole and sold over 13 terabytes of sensitive information including government agency records on dark web markets. The accused hacker was also an active member of the infamous cybercrime and data breach platform Breach Forums. GHOSTR Hacker banned from Breach Forums for multi-accounting (Screenshot credit: Hackread.com) Active since at least 2020; the hacker targeted organizations…

As the Gallagher brothers reunite for the first live Oasis shows in 16 years, scammers have queued up phony ticket schemes to cash in. With that, we’re advising fans to take extra care as they dash to buy seats for these long-awaited shows. McAfee Labs researchers have discovered over 2,000 suspicious tickets for the 2025 reunion tour on sale online, with prices ranging from £700-£1,845. McAfee is urging fans to be careful when purchasing tickets this weekend. In the example below, the following offers appeared on a third-party reseller site several days before the opening sale of official tickets on…