Author: HackWatchit

A bipartisan group of 86 congressional leaders has sent a letter to the Department of Homeland Security Secretary Kristi Noem and FEMA’s Acting Administrator David Richardson, urging the immediate reinstatement of the Building Resilient Infrastructure and Communities (BRIC) grant program. The letter emphasizes the importance of BRIC in helping communities nationwide prepare for and recover from extreme weather. It opens with a direct appeal to the administration:“We are writing to urge the Administration to reinstate the Building Resilient Infrastructure and Communities Grant (BRIC) program within the Federal Emergency Management Agency (FEMA). BRIC funds are spurring communities across the country to…

For years, Distributed Denial of Service (DDoS) attacks have been one of the most common and disruptive tactics used by cybercriminals to overwhelm websites. These attacks flood targeted websites with an immense volume of fake or malicious web traffic, causing the website to slow down, crash, or become completely inaccessible to legitimate users. The primary goal of a DDoS attack is to disrupt the availability of services, rendering the website or online platform unusable for its intended audience.However, recent research and growing trends in the cyber threat landscape suggest a new, more sophisticated twist to DDoS attacks. While DDoS remains…

Problem is a well-known brain teaser from which we can learn important lessons in Decision Making that are useful in general and in particular for data scientists. If you are not familiar with this problem, prepare to be perplexed 🤯. If you are, I hope to shine light on aspects that you might not have considered 💡. I introduce the problem and solve with three types of intuitions: Common — The heart of this post focuses on applying our common sense to solve this problem. We’ll explore why it fails us 😕 and what we can do to intuitively overcome…

For at least half a year, the official software supplied with Procolored printers included malware in the form of a remote access trojan and a cryptocurrency stealer. Procolored is a digital printing solutions provider making Direct-to-Film (DTF), UV DTF, UV, and Direct-to-Garment (DTG) printers. It is particularly known for affordable and efficient fabric printing solutions. The Shenzhen-based company has grown quickly since it started in 2018, and is now selling its products in over 31 countries, with a significant operational presence in the United States. Cameron Coward, a YouTuber known as Serial Hobbyism, discovered the malware when his security solution warned of…

Cybersecurity budgets across operational technology (OT) infrastructure are firmly moving toward long-term strategy, resilience, and regulatory readiness rather than merely patching legacy systems and purchasing tools. CISOs and boards are readjusting their spending priorities to support sustainable protection across complex OT environments as ransomware and nation-state actors pose an increasing threat to critical infrastructure and industrial sectors. The increasing realization that reactive, ad hoc defenses are insufficient is a major factor driving this change. Organizations are investing in risk-informed programs that prioritize threat detection, asset visibility, incident response planning, and business continuity. Network segmentation, secure remote access, and integrated IT/OT…

Darin Roberts// If you have been in the security field for any length of time at all you have heard the term C2.  You might have heard it also called C&C or Command and Control.  I will refer to it as C2 as here at BHIS, that is what we do.  Some of you might wonder what exactly is C2, and those who might know what it is might not understand what it means, and even more might not know how to set up a C2.  It is really not uncommon to be talking with another tester and they will…

Experts found rogue devices, including hidden cellular radios, in Chinese-made power inverters used worldwide Pierluigi Paganini May 18, 2025 Chinese “kill switches” found in Chinese-made power inverters in US solar farm equipment that could let Beijing remotely disable power grids in a conflict. Investigators found “kill switches” in Chinese-made power inverters in US solar farm equipment. These hidden cellular radios could let Beijing remotely cripple power grids during a conflict. The Times reported that experts found rogue devices, including hidden cellular radios, in Chinese-made power inverters used worldwide, including the UK. These devices could be remotely activated to shut off…

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Patch Tuesday: Microsoft fixes 5 actively exploited zero-daysOn May 2025 Patch Tuesday, Microsoft has released security fixes for 70+ vulnerabilities, among them five actively exploited zero-days and two publicly disclosed (but not exploited) vulnerabilities. How to give better cybersecurity presentations (without sounding like a robot)Most people think great presenters are born with natural talent. Luka Krejci, a presentation expert, disagrees. Southwest Airlines CISO on tackling cyber risks in the aviation industryIn this Help Net Security interview, Carrie Mills, VP and CISO, Southwest Airlines talks about…

FrigidStealer malware targets macOS users via fake browser updates, stealing passwords, crypto wallets, and notes using DNS-based data theft methods. A known strain of macOS malware known as FrigidStealer is targeting Apple users through convincing fake browser update prompts. First spotted in February 2025, and reported by Hackread.com, this variant is part of the Ferret malware family and has already impacted users across North America, Europe, and Asia. The malware strain has been linked to TA2726 and TA2727, both known for using fake browser updates as an attack vector. It has also been connected to a surge in infections across…