Author: HackWatchit

Terry Gerton The Consumer Financial Protection Bureau declared a major incident breach in 2023 that affected over 200,000 consumers and 46 institutions. As their inspector general investigated the event, they found a need for much stronger internal controls. Here with more on their findings and recommendations are Laura Shakarji and Michael Zeitler from the Office of the Inspector General of the Federal Reserve Board and Consumer Financial Protection Bureau. Thank you both so much for joining me. Laura, let me start with you because the topic of this report is a term that many people may not understand. What exactly…

The CrowdStrike Falcon® cybersecurity platform played a critical role in helping the joint Germany-Singapore team score highest at Locked Shields 2025. This achievement is a powerful validation of the Falcon platform and the strength of CrowdStrike’s AI-native approach to security. Locked Shields, organized annually by the NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE), is the world’s largest and most complex international cyber defense exercise. The 2025 event involved more than 4,000 participants from 41 nations.  This exercise simulates the most sophisticated nation-state and eCrime cyberattacks that businesses face today. Over a three-week period, 17 multinational blue teams faced over…

: From System Architecture to Algorithmic Execution In my previous article, I explored the architectural foundations of the VisionScout multimodal AI system, tracing its evolution from a simple object detection model into a modular framework. There, I highlighted how careful layering, module boundaries, and coordination strategies can break down complex multimodal tasks into manageable components. But a clear architecture is just the blueprint. The real work begins when those principles are translated into working algorithms, particularly when facing fusion challenges that cut across semantics, spatial coordinates, environmental context, and language. 💡 If you haven’t read the previous article, I suggest…

John Strand // Recently on an episode of Security Weekly, I lost my mind on threat intelligence feeds.  I feel just a bit bad about it. Adorable puppies make everything ok.. Right Apollo? But…  I think I need to explain how I got to this point.  Through SANS and IANS I come into contact with a large number of companies – way more than a normal person should.  About a year or so ago I was all on the threat intelligence feed (TIF) bandwagon.  The idea of sharing information with each other is awesome and powerful. However, something went very…

The Spanish police have dismantled a large-scale investment fraud operation that caused cumulative damages exceeding $11.8 million (€10 million). During simultaneous raids in Barcelona, Madrid, Mallorca, and Alicante, coordinated by the Mossos d’Esquadra, Civil Guard, and the National Police, 21 individuals were arrested. Along with the arrests, the police agents also confiscated seven luxury vehicles and more than $1.5 million €1.3 million in cash and cryptocurrency. The fraudsters appear to have started the operation in 2022 and, since then, authorities received more than three hundred complaints from victims across the country. “They persuaded their victims to make fake investments through…

NTLM relay attacks are the easiest way for an attacker to compromise domain-joined hosts. While many security practitioners think NTLM relay is a solved problem, it is not – and, in fact, it may be getting worse. Anecdotally, they are used in most attacks seen by my employer’s consulting arm and have gotten much more common in the last few years. With most environments vulnerable, NTLM sets the stage for lateral movement and privilege escalation. These attacks originate from Authenticated Users and can often reach Tier Zero, resulting in a large exposure and a critical impact. Here’s an introduction to…

A follow-up to Alpha Engineers Build Through Rejection – on persistence, local expertise, and the cost of ignoring battle-tested builders* The appointment to Tonga Cable Ltd. Chairman wasn’t just recognition, it was validation of a truth I’ve been shouting into the wind for years: we have the skills locally, but our some of our leaders are still mesmerized by outside consultants with PowerPoints and promises. This isn’t about ego. This is about efficiency, sustainability, and the staggering cost of perpetual ignorance. The Consultant Industrial Complex Walk into any government office, any major corporation, any development meeting in the Pacific, and…

The Foundation for Defense of Democracies (FDD) detailed a newly emerged group calling itself Cyber Isnaad Front that has claimed attacks on Israeli government, military, and private sector networks in recent days. While the group promotes itself as an independent Arabic-language hacktivist collective, security analysts say its tactics and targeting patterns mirror those of established Iranian-linked fronts, pointing to a likely connection with Tehran’s broader cyber operations. “Cyber Isnaad Front opened a Telegram Channel on June 17 and, the next day, claimed to have successfully compromised Israeli defense contractors and critical infrastructure providers, exfiltrating data and destroying systems,” Ari Ben…

The notorious Hunters International RaaS group that racked up hundreds of victims over two years says it’s shutting down and offering decryption software to victims, but security pros say this happens regularly in the cybercriminal world and that the threat actors likely will return affiliated with other operations. The post Security Pros Say Hunters International RaaS Operators are ‘Changing Jerseys’ appeared first on Security Boulevard.