Author: HackWatchit

Topic: Digital Perimeter: Security Architecture and Emerging Technologies Watch Now Abstract: In the current threat landscape, where cyber threats are evolving rapidly, proactive network security is desperately needed to prevent and reduce the impact of cyber incidents. Blue teaming and cyber defense incorporate how organizations identify, detect, prevent, and mitigate cyber threats and vulnerabilities. While a traditional approaches to security operations have been reactive to threats, the ever-changing nature of the threat landscape requires that organizations shift to more proactive methods. This webinar series is dedicated to understanding proactive cyber defense strategies and how to build an effective blue team program.…

you heard that the human attention span is shorter than that of a goldfish? According to Microsoft’s 2015 study, the average human attention span decreased from 12 seconds in 2000 to 8 seconds in 2013. The same report stated (using a very straightforward visual) that this fact officially allowed us to supersede goldfish, which achieved a whopping result of 9 seconds [1]. Perhaps luckily for us, this claim lacked solid peer-reviewed research and has since been criticized. The “goldfish” comparison was used more for shock value than for scientific accuracy. The idea that goldfish have a 9-second attention span also…

New data from Zscaler shows that manufacturing, technology, and healthcare remain the most frequently targeted sectors, representing high-stakes environments that are ripe for extortion and leverage, where disruption can yield maximum leverage for attackers. Meanwhile, ransomware attacks on the oil and gas industry surged 935.3% year-over-year, likely fueled by a growing reliance on automation across rigs, pipelines, and infrastructure, inflating the attack surface and outdated security practices that leave critical systems exposed. “Ransomware has long been a constant in the threat landscape—but how it operates is constantly changing,” Zscaler said in its report titled ‘ThreatLabz 2025 Ransomware Report.’ “Today’s campaigns…

Executive Summary Threat actor attribution has traditionally been considered more art than science, often relying heavily on a few threat researchers to confirm observed activity. This approach is unsustainable and contributes to confusion in naming threat groups. We have addressed this by creating the Unit 42 Attribution Framework, while leveraging the excellent work of the Diamond Model of Intrusion Analysis. The Unit 42 Attribution Framework provides a systematic approach for analyzing threat data. This framework facilitates the attribution of observed activities to formally named threat actors, temporary threat groups or activity clusters. A core component is the integration of the…

The notorious INC Ransomware group is claiming responsibility for a data breach at Dollar Tree, the American retail chain known for selling most items at $1.25 or less. Despite its discount model, Dollar Tree is a Fortune 500 company, reporting $17.58 billion in revenue for fiscal year 2025. As seen by Hackread.com, Dollar Tree appeared on the INC Ransomware’s dark web leak site earlier today. The group claims to have breached the company’s security and stolen 1.2TB of sensitive and personal data. “They became a victim of the data breach. 1.2TB of sensitive and personal data will be published soon…

Mondelēz International is one of the world’s largest snack companies, with brands like Oreo, Ritz, and Cadbury sold in more than 150 countries. But behind the scenes, it’s also become a model for modern cybersecurity — replacing fragmented tools and reactive workflows with a unified, AI-native defense strategy. Since deploying the CrowdStrike Falcon® cybersecurity platform, Mondelēz has achieved measurable improvements in detection and response. The security team reports sub-15-minute mean time to detect and a two-hour mean time to mitigate. More importantly, it’s shifted from disorder to control — eliminating operational blind spots, automating key processes, and enabling faster decisions…

The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing attacks using a fake Python Package Index (PyPI) website. PyPI is a repository for Python packages, accessible at pypi.org, that offers a centralized platform for developers to distribute and install third-party software libraries. It hosts hundreds of thousands of packages and is the default source for Python’s package management tools. “PyPI has not been hacked, but users are being targeted by a phishing attack that attempts to trick them into logging in to a fake PyPI site. Over the past few…

Topic: The Trust Trap: Why Securing AI Requires Rethinking Security Itself Watch Now Abstract: Everyone’s racing to secure AI, but no one can agree on what that means. Is it about protecting models? Preventing hallucinations? Auditing prompts? Or is it about something deeper—the loss of control we never really had to begin with? This webinar sheds light on what happens when AI becomes part of the system and why traditional security collapses the moment it tries to control something it doesn’t understand. It challenges the hidden assumptions behind “AI governance,” exposes the real trust gaps no policy can fix, and introduces…

Singulr AI launched the unified AI control plane, a platform that empowers IT, security, and compliance leaders to scale AI adoption without compromising trust. Underpinning the platform are three key modules: the Singulr Pulse risk intelligence system, application-aware AI red teaming, and dynamic runtime protection. The Singulr unified AI control plane redefines AI governance by consolidating discovery, onboarding, and pre- and post-deployment security into a single platform, replacing fragmented solutions with automated, collaborative, and continuous management for all forms of AI. Seamlessly integrating into existing enterprise systems and workflows, the platform accelerates time to value while enabling scalable, responsible AI…