Author: HackWatchit

From Dakar to Dubai, Aliyyah Koloc has carved a space for herself not just on the racetrack but as a cross-cultural symbol of resilience, inclusion, and advocacy. As she prepares to take on the Taklimakan Rally in China, Aliyyah joins us for a conversation that goes beyond racing, touching on identity, responsibility, and the future of crypto-powered cultural preservation. Welcome to our “Voices of the Future” series, Aliyyah!Ishan Pandey: Hi Aliyyah, it’s a pleasure to have you. You’ve had an extraordinary journey, starting professional racing at just 15, competing globally, and advocating for autism awareness. Can you walk us through…

India, China and the US were the top DDoS attacks targets in Q1 2025, with APAC facing over half of global attacks, according to new data from cybersecurity firm StormWall. A new report from cybersecurity firm StormWall reveals that nearly half of all DDoS attacks in the first quarter of 2025 were aimed at China, India and the United States. Instead of focusing heavily on the usual targets, attackers are now directing more of their efforts toward infrastructure in the Asia-Pacific region. According to StormWall’s analytics center, India topped the chart with 18.1% of the global DDoS traffic, followed by…

As SaaS adoption in healthcare skyrockets, so does a silent risk: the explosion of unmanaged identities across hundreds of SaaS applications. With the 2025 HIPAA update introducing strict mandates around MFA, asset inventories, and software removal, one message is clear: You can’t protect what you can’t see, and you certainly can’t secure user accounts if you don’t know which apps are in use. While the new HIPAA security safeguards are clear in writing, they’re often difficult to enforce in practice—especially in decentralized, SaaS-native environments. Despite good intentions, many healthcare organizations still have dangerous blind spots in their SaaS ecosystem. Here…

Pathlock announced a major expansion of its SAP cybersecurity offerings, introducing a new portfolio of value-driven and easy-to-deploy SAP cybersecurity solutions, including a Free Edition. Designed to deliver maximum value and fast time-to-protection, the launch marks a significant step toward democratizing SAP security for organizations of all sizes. Meeting the urgent need for SAP cybersecurity As SAP ERP continues to serve as the digital core for thousands of enterprises worldwide, the need for easy, effective and scalable cybersecurity solutions has never been more pressing. Organizations are confronting an escalating wave of high-impact vulnerabilities, insider threats, and complex hybrid environments –…

David Fletcher // Recently, we had the opportunity to test a production Cylance environment. Obviously, each environment is going to be different and the efficacy of security controls relies largely on individual configuration. However, the posts over the next several days illustrate our observations in one such environment. Different configurations and sound application of defense-in-depth will obviously yield different results. This week we will illustrate the techniques that worked for getting command and control communication within the environment. It should be noted that the environment did not have an effective application whitelisting implementation in place during testing. In addition, access…

Russia-linked threat actors targets Ukraine with PathWiper wiper Pierluigi Paganini June 06, 2025 A Russia-linked threat actor targeted a critical infrastructure organization in Ukraine with a new destructive malware dubbed PathWiper. Russia-linked threat actor targeted Ukraine’s critical infrastructure with a new wiper named PathWiper. Cisco Talos researchers reported that attackers utilized a legitimate endpoint administration tool, indicating they had access to the administrative console, then used it to deploy the PathWiper wiper. Talos attributes the attack to a Russia-linked APT group, with high confidence based on similarities in techniques, tactics and procedures to past attacks on Ukrainian entities. PathWiper is…

In this Help Net Security interview, Benny Porat, CEO at Twine Security, discusses applying AI agents to security decisions. He explains why identity and access management (IAM) is the ideal starting point for both augmentation and automation, and shares advice on building trust in AI agents and integrating them into existing workflows. Which cybersecurity functions or domains are best suited for AI augmentation vs. full automation? How should CISOs think about that division of labor? As identity is one of the most critical attack surfaces, I believe that identity and access management (IAM) is the cybersecurity domain that companies should…

A member of the U.S. House Committee on Homeland Security has reached out to the Department of Homeland Security (DHS) requesting a briefing on the upcoming termination of the Mobile App Vetting (MAV) program this month. Andrew Garbarino, a Republican from New York and chairman of the Subcommittee on Cybersecurity and Infrastructure Protection, has also sought clarification on how the Cybersecurity and Infrastructure Security Agency (CISA) plans to strengthen its role as the Sector Risk Management Agency (SRMA) for the communications sector.  In a letter to Kristi Noem, DHS Secretary, Garbarino highlighted that mobile device security is a vital part…

In this article, I will demonstrate how to move from simply forecasting outcomes to actively intervening in systems to steer toward desired goals. With hands-on examples in predictive maintenance, I will show how data-driven decisions can optimize operations and reduce downtime. with descriptive analysis to investigate “what has happened”. In predictive analysis, we aim for insights and determine “what will happen”. With Bayesian prescriptive modeling, we can go beyond prediction and aim to intervene in the outcome. I will demonstrate how you can use data to “make it happen”. To do this, we need to understand the complex relationships between…