Author: HackWatchit

Ascension reveals personal data of 437,329 patients exposed in cyberattack Pierluigi Paganini May 10, 2025 A data breach at Ascension, caused by a former partner’s compromise, exposed the health information of over 430,000 patients. Ascension is one of the largest private healthcare systems in the United States, ranking second in the United States by the number of hospitals as of 2019. At the end of April, the company notified patients that their personal and health information had been compromised in a December 2024 data breach suffered by a former business partner. The data breach exposed personal and clinical data, including names, contact info, SSNs, and medical…

A United States Customs and Border Protection request for information this week revealed the agency’s plans to find vendors that can supply face recognition technology for capturing data on everyone entering the US in a vehicle like a car or van, not just the people sitting in the front seat. And a CBP spokesperson later told WIRED that the agency also has plans to expand its real-time face recognition capabilities at the border to detect people exiting the US as well—a focus that may be tied to the Trump administration’s push to get undocumented people to “self-deport” and leave the…

Polish authorities arrest 4 behind major DDoS-for-hire sites used in global attacks. Europol, US, Germany, and Dutch forces assist in takedown. In a coordinated international operation, law enforcement has shut down a major slice of the DDoS-for-hire business. Polish authorities, supported by Europol and agencies in the US, Germany, and the Netherlands, have arrested four individuals accused of running six separate stresser/booter platforms that fueled thousands of cyberattacks between 2022 and 2025. The arrested suspects are believed to be behind platforms including: Cfxapi Zapcut Jetstress Neostress Cfxsecurity Quickdown These services offered anyone with a few euros the power to carry…

you for the kind response to Part 1, it’s been encouraging to see so many readers interested in time series forecasting. In Part 1 of this series, we broke down time series data into trend, seasonality, and noise, discussed when to use additive versus multiplicative models, and built a Seasonal Naive baseline forecast using Daily Temperature Data. We evaluated its performance using MAPE (Mean Absolute Percentage Error), which came out to 28.23%. While the Seasonal Naive model captured the broad seasonal pattern, we also saw that it may not be the best fit for this dataset, as it doesn’t account…

Bryan Strand// I have recently started taking SEC566 with James Tarala via SANS on the CSC 20 Critical Controls and decided it would be a great blog series to do a quick overview of each of the controls, and how you could start implementing them on your network. This is by no means an in-depth breakdown of each control, but more of a quick read to get you thinking about what you are currently doing, or what you can start doing to shore up your defenses. CSC #1 Inventory and Control of Hardware Assets Even though it seems a simple…

Microsoft is working on adding a new Teams feature that will prevent users from capturing screenshots of sensitive information shared during meetings. Those joining from unsupported platforms will be automatically placed in audio-only mode to protect shared content. The company plans to start rolling out this new Teams feature to Android, desktop, iOS, and web users worldwide in July 2025. “To address the issue of unauthorized screen captures during meetings, the Prevent Screen Capture feature ensures that if a user attempts to take a screen capture, the meeting window will turn black, thereby protecting sensitive information,” Microsoft shared in a new Microsoft 365 roadmap entry.…

Social media platforms have become essential to our everyday communication for both personal use and professional business operations. Platforms such as LinkedIn, Instagram, and Facebook are widely used by organizations for marketing objectives, helping communicate brand messaging and attracting potential customers. This ubiquity and widespread use make these trusted platforms an attractive target for cybercriminals to exploit.While social media phishing isn’t a novel concept, threat actors are increasing their sophistication by blending urgency, social engineering, and polished impersonation to steal credentials, compromise accounts, and deliver malware. The result is deceptive campaigns that continue to bypass Secure Email Gateways (SEGs). Creating…

In brief Bitcoin SV investors are appealing to have their “forgone growth effect” claim reinstated against Binance, arguing they lost over $13 billion when BSV was delisted in 2019. The Competition Appeal Tribunal previously rejected this specific claim, ruling that most investors could have mitigated losses by trading BSV for other cryptocurrencies. The case is part of a larger class action against multiple exchanges that delisted BSV, complicated by allegations that BSV creator Craig Wright falsely claimed to be Bitcoin’s inventor. Bitcoin SV (BSV) investors have asked the UK Court of Appeal to readmit their claim that Binance’s delisting of…

Authors/Presenters: Eiji Mori, Norihide Saito Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel. Permalink The post BSidesLV24 – Proving Ground – Are You Content With Our Current Attacks On Content-Type? appeared first on Security Boulevard.