Author: HackWatchit

Matt Hartman, a longtime cybersecurity leader at the Cybersecurity and Infrastructure Security Agency (CISA), has announced he will leave the agency on May 31 after 17 years of federal service. Hartman shared the news in a LinkedIn post, reflecting on his journey from the early days of the National Protection and Programs Directorate (NPPD) to a series of senior roles within DHS and CISA. Hartman most recently served as Deputy Executive Assistant Director for Cybersecurity at CISA, a role he held since February 2021. In this position, he helped lead the agency’s growing cybersecurity mission during a time of rapidly…

KrebsOnSecurity last week was hit by a near record distributed denial-of-service (DDoS) attack that clocked in at more than 6.3 terabits of data per second (a terabit is one trillion bits of data). The brief attack appears to have been a test run for a massive new Internet of Things (IoT) botnet capable of launching crippling digital assaults that few web destinations can withstand. Read on for more about the botnet, the attack, and the apparent creator of this global menace. For reference, the 6.3 Tbps attack last week was ten times the size of the assault launched against this…

Lee Kagan* // Expanding upon the previous post in this series, I decided to rewrite C2K (find it here) to change its behavior and options for the user. In this post we will walk through the changes to C2K as well as re-deploy a demo C2 infrastructure with all the new features. It is worth noting that not everything demonstrated is automated or part of the C2K script. There are also more capabilities being added into C2K that are currently in-progress. C2K a.k.a. Command and Control Kit, is a bash script I put together to speed up the process of…

Red Hat Enterprise Linux 10 provides a strategic and intelligent backbone for enterprise IT to navigate complexity, accelerate innovation and build a more secure computing foundation for the future. As enterprise IT grapples with the proliferation of hybrid environments and the imperative to integrate AI workloads, the need for an intelligent, resilient and durable operating system has never been greater. Red Hat Enterprise Linux 10 rises to this challenge, delivering a platform engineered for agility, flexibility and manageability, all while retaining a strong security posture against the software threats of the future. Introducing AI-powered Linux management with Lightspeed According to…

A 19-year-old college student from Worcester, Massachusetts, has agreed to plead guilty to a massive cyberattack on PowerSchool that extorted millions of dollars in exchange for not leaking the personal data of millions of students and teachers. According to the U.S. Department of Justice, Matthew D. Lane pleaded guilty to four federal charges of one count each of cyber extortion conspiracy, cyber extortion, unauthorized access to protected computers, and aggravated identity theft. The DOJ and court documents state that Lane and his conspirators breached a US-based telecommunications company in 2022, where they stole confidential customer information. During this breach, they also gained access to PowerSchool…

A 25-year-old man from Alabama has been sentenced to 14 months in a federal prison for his part in a hack that resulted in the Bitcoin cryptocurrency to briefly soar in value.Eric Council Jr., of Athens, Alabama, pleaded guilty to charges related to the January 2024 hack of the US Securities and Exchange Commission’s (SEC) Twitter account, which saw a fake announcement about the Bitcoin cryptocurrency posted to its 660,000+ followers.The tweet was accompanied by a very corporate image picturing SEC chairman Gary Gensler endorsing the announcement. Frankly, there wasn’t much about the tweet which would have raised suspicion amongst…

Jordan Drysdale // Let’s start this post at Walmart. Yes, the visit may be attributable against the purchaser via security camera footage retrieved by warrant, so hand your wife/husband/confidant/whomever a stack of untraceable cash. The first thing to snag is a new burner phone. This one seems acceptable for our purposes: Wait though, did we define our purposes? Do we need to? Are we hiding from a tyrannical regime? Check. Are we hiding from ad networks trying to group us under demographic profiles that allow injected web responses hijacked through advanced techniques and directed marketing? Check. Are we trying to…

It will take more than a new policy to get certified SBOMs “I’m a big believer that anytime you run into friction, you’re probably doing the right thing,” said Tom Pace. Terry Gerton May 20, 2025 12:33 pm 6 min read Guest: Tom Pace Title: CEO, NetRise Summary: The Pentagon’s new rules to encourage faster software procurements require contractors to provide a software bill of materials and have it certified by an independent third party. The former head of cybersecurity for the Department of Energy, provides insight into what will make that vision a reality. The Federal Drive with Terry…

LockBit, one of the most prolific ransomware gangs operating today, was breached last week revealing its inner operations with clarity. The leaked files, made briefly accessible through an onion site on the Tor network, gave researchers and security professionals a rare look into how LockBit runs its ransomware-as-a-service (RaaS) operation. The deface page on the hacked LockBit ransomware dark web leak site (Screenshot credit: Hackread.com) The breach believed to originate from someone with access to LockBit’s infrastructure, exposed chat logs, ransomware build records, configuration files, Bitcoin wallet addresses, and affiliate identifiers. While ransomware groups are usually in control of the…