Author: HackWatchit

Staff // Thanks to everyone for all the good ideas! We had so much fun with this, and hopefully it made you laugh as much as we did. Happy December! Follow along for some BHIS Christmas Fun with Blue Team Barbie vs. Red Team Elf on the Shelf! Red Team Elf on the Shelf snuck into his gifts a little early this year. Who knows what mischief will follow… After reading about Mike and Beau’s Google calendar exploits Blue Team Barbie implemented Yubikeys for herself and her entire team. Red Team Elf on the Shelf just won’t stop! Looks like…

While 47% of organizations claim to have implemented shift left security strategies, many still struggle with execution gaps and security inefficiencies, according to Pynt. Of those who haven’t implemented shift left, half of them have no plans to do so at all. Shift left security gains momentum Since shift left security was introduced, companies have been trying to live up to its promise: identifying and addressing security issues earlier in the software development lifecycle, ideally before code ever reaches production. “Everyone talks about shifting left, but few are seeing the security gains they expected,” said Tzvika Shneider, CEO of Pynt.…

American economist Kenneth Rogoff believes that the rise of crypto poses a threat to the hegemony of the U.S. dollar.Rogoff previously served as the chief economist at the International Monetary Fund (IMF) and on the Federal Reserve Board. He is a published author and an economics professor at Harvard University.In an interview with Bloomberg, Rogoff said that while the U.S. dollar is still the most dominant global currency, its influence is decreasing.“I see it [dollar’s dominance] as in decline — it’s fraying at the edges where, of course, the renminbi is breaking free of the dollar, the euro is going…

Mike Nicholson, a highly respected cybersecurity and emergency management leader with over 30 years of federal service, has passed away. Nicholson was widely known for his deep commitment to public service, particularly through his work with the U.S. Department of Homeland Security (DHS), the U.S. Patent and Trademark Office, the Cybersecurity and Infrastructure Security Agency (CISA), and most recently as Government Chair of ATARC’s Cybersecurity Mission Area The news was shared by Bill Suder, Vice President at ATARC (Advanced Technology Academic Research Center), who described Nicholson as a “cherished member of our community” whose contributions left an “indelible mark” across…

In a major international operation coordinated by Europol and Eurojust, law enforcement agencies and private sector partners have successfully dismantled the DanaBot malware network. This global effort, part of the ongoing Operation Endgame, led to federal charges against 16 individuals, the neutralization of approximately 300 servers and 650 domains worldwide between May 19 and 22, 2025, and the issuance of international arrest warrants for 20 targets. Over EUR 21.2 million in cryptocurrency has also been seized in total during Operation Endgame, including EUR 3.5 million during this latest action week. The DanaBot malware, controlled by a Russia-based cybercrime organization, infected…

Microsoft is testing a new AI-powered text generation feature in Notepad that can let Windows Insiders create content based on custom prompts. Dubbed “Write,” the new Notepad feature is rolling out to Windows 11 Insiders in the Canary and Dev Channels, who have upgraded to Notepad version 11.2504.46.0. “The new write feature helps you quickly draft text based on your prompt, making it easy to start from a blank page or build upon existing content with AI-powered assistance. To get started, place your cursor where you want to insert new text or select content you’d like to use as a…

What Makes NHI Compliance Essential in Today’s Cybersecurity Landscape? Non-Human Identities (NHIs), the machine identities in cybersecurity are created by combining a secret (an encrypted password, token, or key) and the permissions granted by a destination server. This unique amalgamation of ‘tourist’ and their ‘passport’ requires end-to-end protection to create a secure cloud environment, and that is exactly where NHI management and compliance comes into play. The Strategic Relevance of Mastering NHI Compliance For robust cybersecurity measures, it is paramount to understand the necessity of mastering NHI management and compliance, especially for organizations working in the cloud domain. The disconnect…

Never miss a new edition of The Variable, our weekly newsletter featuring a top-notch selection of editors’ picks, deep dives, community news, and more. Subscribe today! All the hard work it takes to integrate large language models and powerful algorithms into your workflows can go to waste if the outputs you see don’t live up to expectations. It’s the fastest way to lose stakeholders’ interest—or worse, their trust. In this edition of the Variable, we focus on the best strategies for evaluating and benchmarking the performance of ML approaches, whether it’s a cutting-edge reinforcement learning algorithm or a recently unveiled Llm. We…

Jordan Drysdale // A few of us have discussed the stress that small and medium business proprietors and operators feel these days. We want to help stress you out even more. Not really, but if you aren’t worrying about IT security, you are probably doing it wrong. This series will run through some of the important controls that IT pros have mapped out for us. We are trying to present these in a way that you can accomplish them without dedicated IT staff. To start from the beginning of this series: Part 1 – Introduction to SMB InfoSec Controls Part…