Author: HackWatchit

Cynalytica, an innovator in industrial cybersecurity, has launched CyRenLAB, a platform designed to deliver deep visibility, monitoring, and analysis of ICS (industrial control systems) and OT (operational technology) communications. The solution aims to help operators build stronger cyber resilience through practical, experience-driven training. Amid escalating geopolitical tensions and the rapid advancement of artificial intelligence (AI), critical infrastructure has never been under greater threat. Sophisticated cyber adversaries increasingly target not just IT networks, but the physical systems that underpin national economies and public safety. Meanwhile, the emergence of AI-driven attack techniques has further raised the stakes, making the need for comprehensive…

article, I discuss how you can get the most out of attending technical events as a data scientist, ML engineer, or other similar roles. Attending events can be challenging, as there are numerous ways to spend your time. I will thus discuss how to prioritize your time between talking to experts, attending presentations and panels, and visiting company booths. There are also other ways to improve your experience, such as proper preparation ahead of the event and reflecting on your learnings, both of which I will discuss in this article. The inspiration for this article stems from my attendance at NVIDIA…

A hacker is threatening to leak 106GB of data allegedly stolen from Spanish telecommunications company Telefónica in a breach that the company did not acknowledge. The threat actor has leaked a 2.6GB archive that unpacks into five gigabytes of data with a little over 20,000 files to prove that the breach occurred. Partial leak with data allegedly stolen from Telefónica​ The breach allegedly occurred on May 30 and the hacker claims they had 12 hours of uninterrupted data exfiltration before defenders revoked access. The hacker claiming responsibility for the attack is known as “Rey” and is a member of the…

Derek Banks //   ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. More than occasionally I am asked how to get into Information Security as a profession.   As attacks and breaches continue to escalate in frequency the demand rises for information security talent.  I also frequently hear from those in a hiring role that it is hard to find people with the…

The story began with a conversation I had with my girlfriend last Sunday. She, interested in medical research, mentioned that women are often underdiagnosed for stroke. There are often many false negative cases among women because initial stroke research was mainly conducted on male subjects. As a result, the symptoms seen in women—often different from those observed in men—could not be recognized clinically. A similar issue has been observed in skin cancer diagnosis. Individuals with darker skin tones have less of a chance of being correctly diagnosed. Examples like these show how bias in data collection and research design can…

This is the 10th article in our IT lifecycle management series, Delivering the tech that delivers for government. Don’t mistake invention for innovation. It’s easy to do, BAE System’s Peder Jungck points out. “The thing that’s changed is the pace of what I would call innovation, which is not necessarily the same as invention,” said Jungck, chief innovation and strategy officer for the intelligence and security sector at BAE Systems. Right now, it’s an “incredible time” to talk about innovation and how capabilities available from three emerging technologies — artificial intelligence, autonomy and automation — can catapult how and how…

In a report published by ANSSI on July 1, 2025, the French cybersecurity agency revealed a highly skilled cybercrime group, dubbed Houken, has carried out a sophisticated attack campaign exploiting multiple zero-day vulnerabilities (CVE-2024-8190, CVE-2024-8963, and CVE-2024-9380) in Ivanti Cloud Service Appliance (CSA) devices. This group, believed to be linked to the Chinese threat actor UNC5174, infiltrated high-value targets across France. Affected sectors included government bodies, defence organizations, telecommunications providers, financial institutions, media outlets, and transport networks. The attacks were first observed in September 2024, targeting French entities seeking initial access to their networks. These zero-day vulnerabilities, meaning they were…

David Fletcher // Recently, while assessing a web application I noticed content on one of the pages that appeared to be derived from sensitive information stored within the site’s user profiles. To evaluate this functionality and illustrate the potential for sensitive information leakage I needed to: Enumerate the values on my profile page to create a concrete association between the sensitive and derived values. Collect and map the sensitive information within the public user profile directory to show that a direct correlation could be easily made During testing, I tried to assess the functionality using the default capabilities of Burp…

your anomaly detection results to your stakeholders, the immediate next question is always “why?”. In practice, simply flagging an anomaly is rarely enough. Understanding what went wrong is crucial to determining the best next action. Yet, most machine learning-based anomaly detection methods stop at producing an anomaly score. They are black-box in nature, which makes it painful to make sense of their outputs-why does this sample have a higher anomaly score than its neighbors? To tackle this explainability challenge, you may have likely already resorted to popular eXplainable AI (XAI) techniques. Perhaps you are calculating feature importance to identify which variables are…