Author: HackWatchit

A new series of cyber attacks is targeting professionals in the crypto and blockchain industries using fake recruitment scams, according to new research by Cisco Talos. The attackers, linked to a North Korea-aligned group known as Famous Chollima, are impersonating legitimate companies to trick victims into installing malware disguised as video drivers. The group has been active since at least mid-2024, previously known for tactics like fake developer job postings and fraudulent interview processes. This latest development shows the operation evolving in sophistication, now with a new Python-based malware called PylangGhost, a variant of the previously identified GolangGhost trojan. Real…

Companies with $1 billion in revenue or less might want to give a heads-up to HR to kickstart the search for a new CISO — because according to a study from IANS Research, your current CISO might be out the door within a year. The 363 CISOs in SMBs surveyed for the 2025 Small and Mid-Market CISO Compensation and Budget Benchmark Report feel the same pressures as their counterparts in large enterprises — assuming more business- and risk-related responsibilities across their organizations — but with less compensation and tighter budgets.  “In many companies, it’s the CISO’s job to align cybersecurity priorities…

Lawrence Hoffmann // Election fraud is something I’ve mentioned here recently. The reality we must face here is that any time a digital system is used for voting there is […] The post Lawrence’s List 090216 appeared first on Black Hills Information Security, Inc..

iOT365, a global vendor of OT (operational technology) and IoT (Internet of Things)  cybersecurity solutions, and Civitas Group, Romania’s provider of integrated security services, announced on Wednesday a partnership to introduce the iOT365 cybersecurity platform into Romania and other Eastern European and Balkan markets. This collaboration enables Civitas to offer advanced cybersecurity protection for physical security systems and a full suite of OT and IoT cybersecurity services to its broad client base. Under this partnership, iOT365 will provide its cybersecurity platform to Civitas, which delivers expert installation, ongoing management, and cybersecurity monitoring services through iOT365’s OT/IoT Security Operations Center (SOC).…

1. It with a Vision While rewatching Iron Man, I found myself captivated by how deeply JARVIS could understand a scene. It wasn’t just recognizing objects, it understood context and described the scene in natural language: “This is a busy intersection where pedestrians are waiting to cross, and traffic is flowing smoothly.” That moment sparked a deeper question: could AI ever truly understand what’s happening in a scene — the way humans intuitively do? That idea became clearer after I finished building PawMatchAI. The system was able to accurately identify 124 dog breeds, but I began to realize that recognizing…

News broke today of a “mother of all breaches,” sparking wide media coverage filled with warnings and fear-mongering. However, it appears to be a compilation of previously leaked credentials stolen by infostealers, exposed in data breaches, and via credential stuffing attacks. To be clear, this is not a new data breach, or a breach at all, and the websites involved were not recently compromised to steal these credentials. Instead, these stolen credentials were likely circulating for some time, if not for years. It was then collected by a cybersecurity firm, researchers, or threat actors and repackaged into a database that was…

Ethan Robish // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. Let’s Encrypt is a free service that allows you to obtain a free (as in beer) SSL/TLS domain validation certificate to use as you wish.  Here is what they have to say about themselves: Let’s Encrypt is a free, automated, and open certificate authority (CA), run for the public’s benefit.…

The Israel-linked hacker group known as Predatory Sparrow has carried out some of the most disruptive and destructive cyberattacks in history, twice disabling thousands of gas station payment systems across Iran and once even setting a steel mill in the country on fire. Now, in the midst of a new war unfolding between the two countries, they appear to be bent on burning Iran’s financial system.Predatory Sparrow, which often goes by its Farsi name, Gonjeshke Darande, in an effort to appear as a homegrown hacktivist organization, announced in a post on on its X account Wednesday that it had targeted…

Researchers discovered the largest data breach ever, exposing 16 billion login credentials Pierluigi Paganini June 19, 2025 Researchers discovered the largest data breach ever, exposing 16 billion login credentials, likely due to multiple infostealers. Researchers announced the discovery of what appears to be the largest data breach ever recorded, with an astonishing 16 billion login credentials exposed. The ongoing investigation, which began earlier this year, suggests that the credentials were collected through multiple infostealer malware strains. Cybernews researchers who discovered the data leak, reported that tit was composed of 30 massive leaked datasets across various platforms, totaling an unprecedented 16…