Author: HackWatchit

In a recent conversation with Paul Asadoorian, he mentioned a Nessus plugin called nmapxml.  He was not sure how well it worked but suggested I try it out. The plugin allows you to import Nmap scan results for Nessus to use in the discovery phase of a scan.  The discovery phase of a Nessus scan occurs at the beginning when Nessus is trying to “discover” which hosts are alive as well as which services and operating systems are running on those hosts that will require vulnerability testing.   But Nessus has a built-in port/service scanner you say, right?  Yes, you…

I realized early on that cybersecurity was going to become a major part of the future, especially as more people got online and organizations began relying heavily on digital systems to drive productivity and deliver services. Going through the CCISO certification, I found the material very relevant to my day-to-day responsibilities. It provided valuable insights into maturing our security processes and aligning them more closely with business objectives.

In this Help Net Security interview, Michal Tresner, CEO of ThreatMark, discusses how cybercriminals are weaponizing AI, automation, and social engineering to industrialize money mule operations. He looks at how these networks have changed and how behavioral intelligence is helping to catch fraud. Tresner also shares practical tips for CISOs trying to stop mule activity before it gets out of hand. How are cybercriminals using automation, AI, or social engineering to scale mule recruitment and movement of funds? The fraud landscape has fundamentally shifted with the adoption of generative AI. What once required manual effort can now be executed at…

CESER, in collaboration with cybersecurity firms Bastazo and Network Perception and researchers from the University of Arkansas, has developed a new software toolset to help energy utilities assess and address security vulnerabilities. The solution, named V-INT: Automated Vulnerability Intelligence and Risk Assessment, addresses a big hurdle in cybersecurity of understanding an organization’s complex firewall policy. The project delivers advanced capabilities for identifying cyber risks in critical energy systems, aiming to strengthen the sector’s resilience against evolving threats. The University of Arkansas project funded by the Department of Energy’s (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has created…

Melisa Wachs // Hello IT professional.  If you haven’t heard it lately, I hope you know that you’re really amazing. You’re probably helping “laymen” like me all day long. Maybe you were explaining simple encryption, or sending out a phishing warning, or just updating software. Perhaps you don’t feel appreciated, so today I want to give a sincere “thanks.” See, I’m not one to be able to grasp the abstract. The very idea that electricity can be harnessed, moved and stored is a mystery to me. This fascination is not just with computers. I give the same amazement to anyone…

in the data input pipeline of a machine learning model running on a GPU can be particularly frustrating. In most workloads, the host (CPU) and the device (GPU) work in tandem: the CPU is responsible for preparing and feeding data, while the GPU handles the heavy lifting — executing the model, performing backpropagation during training, and updating weights. In an ideal situation, we want the GPU — the most expensive component of our AI/ML infrastructure — to be highly utilized. This leads to faster development cycles, lower training costs, and reduced latency in deployment. To achieve this, the GPU must…

CitrixBleed 2: The nightmare that echoes the ‘CitrixBleed’ flaw in Citrix NetScaler devices Pierluigi Paganini June 26, 2025 New Citrix flaw ‘CitrixBleed 2’ lets attackers steal session cookies without logging in, echoing a previously exploited vulnerability. A new flaw in Citrix NetScaler ADC and Gateway, dubbed ‘CitrixBleed 2‘ (CVE-2025-5777, CVSS v4.0 Base Score of 9.3), can allow unauthenticated attackers to steal session cookies, similar to a past critical exploit. The vulnerability is an insufficient input validation issue leading to memory overread that impacts NetScaler configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server. The…

Penlink has announced that Derek S. Maltz, a veteran national security and law enforcement leader, is the company’s new Senior Vice President of Global Business Growth and Strategy. In this role, Mr. Maltz will help accelerate Penlink’s global market expansion and support the company’s mission to deliver cutting-edge digital intelligence solutions to law enforcement, national security, defense, and enterprise sectors worldwide. Mr. Maltz is widely recognized as a national leader in the fight against fentanyl and global drug trafficking. He frequently appears in U.S. media and testifies before Congress to raise awareness on critical public safety threats. Mr. Maltz rejoins…

Ransomware gang infects insurance company, but DOESN’T install ransomware. Instead it steals information about insurance company’s clients, learns which have cyberinsurance, and how much insurance cover they have. Gang takes list of insured companies and goes through it – it’s a rolodex of ransomware – infecting each one with ransomware. They tell the victims that they know how much cyberinsurance they have, and suggest they pay up quick. Once gang has gone through the entire list, it goes back to where it began – with the original hacked insurance company,…