Author: HackWatchit

Cloudflare says it mitigated a record-breaking distributed denial of service (DDoS) attack in May 2025 that peaked at 7.3 Tbps, targeting a hosting provider. DDoS attacks flood targets with massive amounts of traffic with the sole aim to overwhelm servers and create service slowdowns, disruptions, or outages. This new attack, which is 12% larger than the previous record, delivered a massive data volume of 37.4 TB in just 45 seconds. This is the equivalent of about 7,500 hours of HD streaming or 12,500,000 jpeg photos. The record-breaking DDoS attackSource: Cloudflare Cloudflare, a web infrastructure and cybersecurity giant specializing in DDoS…

Why Should Professionals Consider NHI for Security Needs? Is your organization exploring efficient ways to secure cloud environments? By leveraging comprehensive Non-Human Identities (NHIs), businesses can improve their cybersecurity posture while ensuring compliance and efficiency. NHIs, the machine identities, act as the encrypted passports and visas of your digital tourist – the virtual devices, services, and applications that travel through the cloud. Understanding the Strategic Importance of NHIs in Cloud Security NHIs play a pivotal role to ensure the security of digital assets at rest and in motion. With the rise in multi-cloud and hybrid cloud environments, the number of…

In this webcast we walked through the current super cool crop of MITM tools. We looked at Bettercap, MITMf and discussed LLMNR and WPAD poisoning attacks.  Also, this was a new section of SANS 504.  I like to have the updates go through an open trial first. Check it out! Enjoy and if you have questions feel free to leave them in the comments. Thanks again to all who attended! -John   Available live/virtual and on-demand

95% of C-suite leaders say that GenAI is driving a new level of innovation in their organizations, according to NTT DATA. While CEOs and business leaders are committed to GenAI adoption, CISOs and operational leaders lack the necessary guidance, clarity and resources to address security risks and infrastructure challenges associated with deployment. The C-Suite disconnect 99% of C-Suite executives are planning further GenAI investments over the next two years, with 67% of CEOs planning significant commitments. In parallel, 95% of CIOs and CTOs report that GenAI has already driven, or will drive, greater cybersecurity investments, with organizations ranking improved security…

Cybersecurity experts at Varonis Threat Labs have identified a clever new way to spot hidden cyberattacks, even those used by highly skilled state-sponsored groups and criminal gangs. Their new technique, called Jitter-Trap, focuses on identifying patterns of randomness that hackers use to stay secret. This fresh approach aims to catch a tricky part of cyberattacks known as “post-exploitation and C2 communication.” For your information, attackers often use special software, or beacons, that send signals back to their control centers. These beacons are designed to be hard to find by using random timings, like a heartbeat that speeds up and slows…

New insights from Radware identified that Israel launched high-impact cyber strikes targeting Iranian financial infrastructure. In response, Iran turned to disinformation campaigns and psychological warfare to counter the attacks. Hacktivist activity surged in the aftermath, with the majority of operations skewed heavily in favor of Iran. Disinformation efforts, including the use of AI-generated media, continue to shape and distort the online narrative. The ongoing cyber conflict now poses a growing risk of regional destabilization and potential global spillover. The Israel-Iran conflict that began last week has quickly expanded into cyberspace, with both nations leveraging their cyber capabilities. State-sponsored hackers, hacktivists,…

Godfather Android trojan uses virtualization to hijack banking and crypto apps Pierluigi Paganini June 21, 2025 Godfather Android trojan uses virtualization to hijack banking and crypto apps, stealing user funds, warns mobile security firm Zimperium. Zimperium zLabs has uncovered a major evolution of the GodFather Android trojan, which uses on-device virtualization to hijack real banking and crypto apps. Instead of using fake overlays, the malware creates a sandbox on the victim’s device, runs actual apps inside it, and intercepts user input in real time. This technique allows for full account takeovers and bypasses security features. The current campaign targets Turkish…

Increasing weather extremes are producing a larger human and economic toll. And a lot of dying canaries in coalmines. No major hurricane on record had struck before August on the Pacific coast of Mexico until Erick did so on this mid-June Thursday as a category 3, after peaking as a 145 mile-per-hour (mph) category 4 monster. Admittedly, the historical registry of tropical cyclones in the eastern Pacific is short, dating back to 1949. But those archives include 1,250 tropical cyclones, putting Erick firmly into “unprecedented” territory. Read the full story at NBC 6 South Florida here.

watching Jeffrey Wang as a live stream guest with Reid Havens, and one of the dozen wonderful things that Jeffrey shared with the audience was the list of optimizations that the DAX engine performs when creating an optimal query plan for our measures. And, the one that caught my attention was regarding the so-called “Sparse measures”: Screenshot from the live stream on YouTube To make it simple, once you define the measure, Formula Engine in VertiPaq will add an implicit NonEmpty filter to the query, which should enable the optimizer to avoid full cross-join of dimension tables and scan only those rows where…