Author: HackWatchit

Law enforcement has seized the dark web extortion sites of the BlackSuit ransomware operation, which has targeted and breached the networks of hundreds of organizations worldwide over the past several years. The U.S. Department of Justice confirmed the takedown in an email earlier today, saying the authorities involved in the action executed a court-authorized seizure of the BlackSuit domains. Earlier today, the websites on the BlackSuit .onion domains were replaced with seizure banners announcing that the ransomware gang’s sites were taken down by the U.S. Homeland Security Investigations federal law enforcement agency as part of a joint international action codenamed Operation Checkmate.…

In an era of achieving efficiencies, here’s how the federal government can combat third-party risks and insider threats Third-party vulnerabilities and insider threats continue to gain momentum in a volatile cybersecurity landscape. Travis Rosiek July 24, 2025 6:49 pm 5 min read The federal government is facing many uphill battles when it comes to addressing third-party vulnerabilities and insider threats. Government agencies are also trying to navigate new government initiatives on efficiency and cybersecurity executive orders, all while dealing with tight budgets. Additionally, with the strategic push to adopt artificial intelligence across the federal government, this potentially expands risks from…

Stopping Modern Attacks with AI and Expertise   CrowdStrike leads the industry in MDR, delivering unmatched expertise and a single mission: to stop breaches. Shaped by years of hands-on threat response, the Falcon Complete Next-Gen MDR team has faced the world’s most sophisticated adversaries and knows how to stop advanced threats before they can disrupt your business. The Frost Radar™ report emphasizes CrowdStrike’s distinctive advantages in the MDR market, particularly noting our comprehensive approach to threat detection and response.  According to Frost & Sullivan, “Falcon Complete Next-Gen MDR blends the power of the AI-native Falcon platform with a highly experienced team…

The annual CISO New York summit will be held on September 9, 2025, uniting over 150 senior cybersecurity executives for a full day of insight, strategy, and collaboration at Convene, 601 Lexington Avenue. This highly curated summit is tailored for senior InfoSec professionals such as CISOs, VPs of Security, and Heads of Cyber from non-vendor organizations, who are invited to attend with a complimentary VIP pass. Strategy in action: From the boardroom to execution As cybersecurity becomes a board-level priority, the event focuses on converting strategy into measurable action. The agenda spans: Cybersecurity governance aligned with business objectives Risk frameworks…

Good design is actually a lot harder to notice than poor design, in part because good designs fit our needs so well that the design is invisible, serving us without drawing attention to itself. — Don Norman, “The Father of User Experience” In a recent Threat Vector podcast, host David Moulton sat down with Nelson Lee to discuss how user experience and artificial intelligence are revolutionizing cybersecurity operations. In an industry often dominated by technical capabilities and threat intelligence, the human experience of using security tools frequently takes a backseat. Nelson Lee, who leads product engineering at Palo Alto Networks,…

Choosing between an on-premises and SaaS data annotation platform affects more than just how you label data. It shapes your team’s workflow, budget, and ability to manage sensitive information. With AI models demanding ever-larger and more accurate datasets, selecting the right approach matters. This article compares both options (on-premises and SaaS) and explains when each makes sense. You’ll also learn what to consider when evaluating a data labelling platform, whether you’re running an internal project or using an AI platform data labelling service. What Is a Data Annotation Platform? Before you choose between on-premises and SaaS, it helps to understand…

Wardriving in cybersecurity is the practice of scanning for Wi-Fi networks while moving through an area, usually by car. Wardrivers use laptops, phones, or custom setups to log network data, typically to look for unsecured or poorly secured connections. Wardriving traces back to the movie WarGames, where the main character “war dialed” every phone number in a location to find working computers. This idea evolved into mapping Wi-Fi access points to find weak or open networks. The term itself was coined by Peter Shipley, who created software that worked with portable GPS devices. This guide covers how wardriving works, the…

for an Old Challenge You are training your model for spam detection. Your dataset has many more positives than negatives, so you invest countless hours of work to rebalance it to a 50/50 ratio. Now you are satisfied because you were able to address the class imbalance. What if I told you that 60/40 could have been not only enough, but even better? In most machine learning classification applications, the number of instances of one class outnumbers that of other classes. This slows down learning [1] and can potentially induce biases in the trained models [2]. The most widely used…

KrebsOnSecurity recently heard from a reader whose boss’s email account got phished and was used to trick one of the company’s customers into sending a large payment to scammers. An investigation into the attacker’s infrastructure points to a long-running Nigerian cybercrime ring that is actively targeting established companies in the transportation and aviation industries. Image: Shutterstock, Mr. Teerapon Tiuekhom. A reader who works in the transportation industry sent a tip about a recent successful phishing campaign that tricked an executive at the company into entering their credentials at a fake Microsoft 365 login page. From there, the attackers quickly mined…