Author: HackWatchit

The U.K. National Cyber Security Centre on Wednesday published six cybersecurity culture principles developed through extensive research with industry and government partners. The principles define the cultural foundations essential for building a cyber-resilient organization and offer guidance on how to cultivate that environment. They are intended to support leaders and cybersecurity professionals in creating conditions where secure behaviours can take root and endure. The principles also draw attention to how weak or misaligned cultures can lead to poor security outcomes, and encourage organizations to view such outcomes as symptoms of deeper cultural issues that require attention. Recognizing that people are…

The threat landscape is evolving at an unprecedented pace, rendering the current security capabilities insufficient to keep up. This scenario highlights the growing need for proactive security measures such as vulnerability assessments, penetration testing, and ethical hacking. The Certified Ethical Hacker (CEH) certification is proving to be pivotal in enabling IT and networking professionals to transition to careers in penetration testing.  To understand the impact of CEH on the cyber community and professionals, the EC-Council’s CyberTalks team reached out to Basil McKenzie, a CEH-certified professional penetration tester. In this blog, Basil discusses his professional journey in cybersecurity via the Certified…

A massive data leak has put the personal information of over 3.6 million app creators, influencers, and entrepreneurs at risk, reveals a report from vpnMentor. Cybersecurity expert Jeremiah Fowler uncovered an unsecured database containing a whopping 12.2 terabytes of sensitive data, linked to an app-building platform. The exposed database, which was neither encrypted nor protected by a password, held 3,637,107 records. These records included names, email addresses, physical addresses, and details about payments for what appeared to be both users and app creators. According to Fowler’s report, internal files and the database’s name suggested the data belonged to Passion.io, a…

Bitdefender announced GravityZone Compliance Manager, a new addition to its GravityZone platform that helps organizations reduce the burden of compliance and streamline audit readiness. Designed specifically for today’s complex regulatory landscape, the solution provides real-time visibility, automated remediation, audit-ready reports, and one-click compliance documentation fully integrated with Bitdefender endpoint security and risk analytics. “GravityZone Compliance Manager performed well for us during early access. The continuous monitoring and assessment feature reduced our reliance on manual scans, saving valuable time. Because it’s integrated into our existing security stack, we’ve avoided the additional cost and complexity of using external tools. It has simplified…

Although many security experts angrily railed against the media’s portrayal of Lizard Squad as “sophisticated,” people grudgingly came to accept that the Christmas attack did have a big impact on cybersecurity and the gaming industry. There’s little doubt that this was not the group’s motive—despite their clumsy attempts to claim so in interviews. But it was a wake-up call. Security website SecurityAffairs wrote a “lessons learned” piece by dissecting my interview with Kivimäki. Many people considered Lizard Squad script kiddies, they wrote, adding, “This approach is totally wrong.”The size of the attack unleashed on that day would be shrugged off…

In brief NBA star Tristan Thompson spoke with Decrypt at Bitcoin 2025. He hosts a crypto podcast and serves as a brand ambassador for industry startups. Thompson compared athletes to assets and dished on the history of sports and crypto. What does a 14-year career in professional basketball have in common with mastering the crypto market? According to NBA star Tristan Thompson, who played for the Cleveland Cavaliers this past season, both require discipline and persistence.At last week’s Bitcoin 2025 conference in Las Vegas, Thompson told Decrypt that he’s been able to learn a lot about cryptocurrency since entering the…

Beau Bullock // Overview Microsoft Exchange users have the power to grant other users various levels of access to their mailbox folders. For example, a user can grant other users access to read emails from their Inbox. If a user (or Exchange administrator) isn’t careful and sets permissions incorrectly they might grant access to their mailbox to everyone at an organization. This creates a situation where any user at the organization can now read email from the mailbox with too broad permissions. Using MailSniper, it is possible to quickly enumerate mailboxes like this that are accessible by any user. In…

Conclusion According to Chen, CPENT offers a transformative learning experience for cybersecurity professionals seeking deeper expertise in penetration testing. Its practical, lab-focused approach equips learners with the tools, techniques, and mindset needed to tackle real-world scenarios. He shares how he developed a stronger command of critical data security concepts and improved his ability to respond effectively to complex threats through hands-on challenges in the program’s lab environments. The course also provided him with valuable career benefits, contributing to professional growth and readiness for real-world cybersecurity challenges. For success in the CPENT exam, Chen recommends making full use of the lab…

We’re introducing Escape Copilot (in Beta), a new AI-powered assistant designed to help your security team work more efficiently with the Escape platform. Powered by the Model Context Protocol (MCP) on the Escape Public API, Copilot understands your unique security setup and helps you get more done in less time by simplifying everyday workflows like managing scans and tracking assets. Built for Context-Aware Security Automation Security teams face growing complexity and time pressure. Routine tasks like launching scans, updating application configs, or tracking domain status can slow things down, especially in large or distributed environments. Escape Copilot helps reduce this…