Author: HackWatchit
Learn how to sue companies under GDPR for data misuse. Understand your rights, file complaints, and claim compensation for privacy violations. Under the General Data Protection Regulation (GDPR), individuals have the right to sue and seek compensation if their personal data has been mishandled by a company. This comprehensive guide outlines the steps to take legal action against organizations that violate your data protection rights. Understanding Your Rights Under GDPR The GDPR, implemented in 2018, empowers individuals to control how their data is used and processed. Article 82 of the GDPR specifically provides individuals with the right to receive compensation…
What do you get when you combine EZBC and EZET? According to the launch of Franklin Templeton’s Crypto Index ETF, the result is EZPZ.Representing the ticker name of Franklin Templeton’s newest crypto product listed on the Cboe BZX exchange on Thursday, EZPZ offers investors both Bitcoin and Ethereum exposure.The product tracks price movements for the two top cryptocurrencies based on CF Benchmark’s Institutional Digital Asset Index, which debuted last year, and focuses on coins “recognized as being in conformance with major financial jurisdictions prevailing capital markets.”That means that instead of targeting just one cryptocurrency, the index weights top coins by…
Security researchers at Apiiro have released two free, open-source tools designed to detect and block malicious code before they are added to software projects to curb supply chain attacks. The two tools consist of a comprehensive ruleset for Semgrep and Opengrep designed to detect malicious code patterns with minimal false positives and PRevent, a GitHub-integrated scanner, that detects and alerts on suspicious code in pull requests (PRs). According to Apiiro’s security researcher Matan Giladi, the tools have a minimal false positive detection rate, making them particularly valuable in real-world practice. Specifically, the detection accuracy of the ruleset for PyPI packages is…
Runa launched Runa Assure, a security suite specifically built to fortify payout processes against threats of fraud, cyberattacks, and compliance risks. Runa Assure was purpose-built for instant payout methods, including gift cards, prepaid, and push-to-card, and now protects over two million unique recipients every month. Runa Assure’s compliance, fraud, and security defenses are integrated throughout the entire payout transaction lifecycle, with no extra cost or action required for clients or recipients. “As pay-ins and payouts become increasingly instant and adoption increases across more use cases, keeping funds secure is more important than ever,” said Aron Alexander, CEO of Runa. “Unlike…
Microsoft fixed actively exploited flaw in Power Pages Pierluigi Paganini February 20, 2025 Microsoft addressed a privilege escalation vulnerability in Power Pages, the flaw is actively exploited in attacks. Microsoft has addressed two critical vulnerabilities, tracked as CVE-2025-21355 (CVSS score: 8.6) and CVE-2025-24989 (CVSS score: 8.2), respectively impacting Bing and Power Pages. CVE-2025-21355 is a missing authentication for critical Function in Microsoft Bing, an unauthorized attacker could exploit the flaw to execute code over a network. The researcher Nicolas Joly reported the vulnerability. CVE-2025-24989 is an improper access control flaw in Power Pages, an unauthorized attacker could exploit the flaw to elevate…
Niccolo Arboleda is a cybersecurity enthusiast and student at the University of Toronto. He is usually found in his home lab studying different cybersecurity tools and working on projects. He is passionate about defending critical infrastructure from cyber-attacks. There are always new and evolving threats that target our environments. It is essential to detect these threats before they cause actual harm to people and their livelihoods. In this blog, we will cover how to build a simple Security Information and Event Management (SIEM) environment to simulate attacks and give us an understanding of how vital detection is in identifying threats…
Thinking about deleting your TikTok account? We can show you how. Before we get to that, you might be interested to find what kind of data TikTok collects about you — and how long TikTok keeps your account data, even after you delete it. What does TikTok know about you? For that, we turn to TikTok’s privacy policy page.[i] TikTok collects data just like practically any other social media platform, and the list of what they collect runs long. You can see a full list in their privacy policy, yet here are a few things you might want to know…
ipoque, a Rohde & Schwarz company, has taken a significant leap in enhancing critical infrastructure security through its advanced 5G network analytics system, which is adept at detecting and tracking unauthorized drones. The approach is further strengthened by a collaboration with Helmut-Schmidt-University of the Federal Armed Forces Hamburg (HSU/UniBw H). Together, they are pioneering research to develop sophisticated technology that can identify and neutralize potential threats from unauthorized unmanned aerial systems (UAS). By analyzing intricate patterns within extensive 5G network data streams, this partnership aims to create a robust defense mechanism against the rising challenges posed by unauthorized drones, ensuring…
Apiiro security researchers have released open source tools that can help organizations detect malicious code as part of their software development lifecycle: PRevent (a scanner for pull requests), and a malicious code detection ruleset for Semgrep and Opengrep static code analysis tools. PRevent in action (Source: Apiiro) The tools work by detecting two anti-patterns the researchers pinpointed after analyzing thousands of malicious code instances in repositories and packages: obfuscated / unreadable source code, and dynamic execution (i.e., code execution at runtime instead of at build or compile time). “Some malicious patterns are common in legitimate code and would cause false-positives…