Author: HackWatchit

The smallest minority on earth is the indiviudal I have news.I am writing a Bitcoin book!Here is the teaser cover Somewhere in there, I had a few things to say about decentralized AI. This is why I am overall skeptical of the “decentralized AI” idea. It is like decentralized altcoins. In principle, yes, a large DePIN (Decentralized Physical Infrastructure Network) could be cobbled together and trained to create a massive AI. But who will be in charge of the training data and infrastructure? That’s the centralization point (of failure). Just as the team behind every altcoin has a premine they…

Terry Gerton: Megan, the Cybersecurity Information Sharing Act, which was passed in 2015, sunsets on September 30th of this year. Lots of authorizing legislation has lapsed and most of the practices that they authorize have continued on through appropriations. Why would or should this particular one be different? Megan Brown: Well, CISA 2015, as I referred to it, has several key parts that the private sector relies on. And so its sunset would eliminate some of those key protections. And so I think there’s a real interest in keeping this baseline going forward. Congress passed it 10 years ago. It…

Coro unveiled its Security Awareness Training (SAT) module. A purpose-built solution, SAT helps SMBs reduce human error, defend against phishing attacks, and demonstrate compliance without adding new tools to manage. As part of Coro’s modular cybersecurity platform, the new Security Awareness Training module delivers maximum protection with minimal complexity. “Over 90% of breaches start with human error,” said Coro’s CEO, Guy Moskowitz. “AI has made phishing attacks more convincing than ever, which is why our SAT module delivers intelligent, adaptive training—built directly into the Coro platform. No complexity, tool sprawl, or integration headaches—just effective protection where it matters most: your…

SonicWall fixed SMA 100 flaws that could be chained to execute arbitrary code Pierluigi Paganini May 09, 2025 SonicWall addressed three SMA 100 flaws, including a potential zero-day, that could allow remote code execution if chained. SonicWall patches three SMA 100 vulnerabilities (CVE-2025-32819, CVE-2025-32820, and CVE-2025-32821), including a potential zero-day, that could be chained by a remote attacker to execute arbitrary code. The first flaw, tracked as CVE-2025-32819 (CVSS score of 8.8), is a Post-Authentication SSLVPN user arbitrary file delete vulnerability. “A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks…

Why identity fragmentation becomes a real problem At first, having multiple identity providers might seem like a necessary side effect of growth, especially after a few acquisitions or cloud migrations. However, over time, this fragmented identity architecture starts to cause severe headaches. For starters, it’s expensive. Running multiple IdPs means paying for overlapping licenses, support, and ongoing maintenance. That money goes to complexity, not innovation. It also slows things down. Each IdP tends to live in its little world, managed by different teams with their own policies and processes. That makes it harder to coordinate access and troubleshoot, and it…

In our hyperconnected world, mobile devices are no longer a convenience but central to how businesses operate and communicate. As organizations increasingly embrace mobility and bring-your-own-device (BYOD) policies, a hidden risk is quietly growing within the apps we rely on every day: mobile data leaks.While many assume that breaches occur from malicious hacking attempts, a far more overlooked threat is the unintentional exposure of sensitive data due to misconfigured cloud services or weak cryptographic practices. This is not a hypothetical concern. In 2024 alone, over 1.7 billion individuals were impacted by personal data compromises, marking a 312% increase from the…

John Strand talks about his own journey into information security and shares his suggestions for those wanting to get started from scratch or who are looking to change career tracks. Special Guests: Randy Marchany, CISO of Virginia Tech & Director of the VA Tech IT Security Lab, and Ed Capizzi, SANS instructor. Show Notes / Links: Just a few of the specific things that were referenced in this show View John’s Five Year Plan, version 1 from last year here: Five Year Plan Webcast, 2017 Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_5YearPlanIntoInfoSecPart2.pdf Virginia Tech Cyber Range www.virginiacyberrange.org “Good…

Google’s Threat Intelligence Group (GTIG) has observed a decline in activity from UNC3944—also known as Scattered Spider—a financially motivated threat actor known for its persistent use of social engineering and bold interactions with victims. The drop in activity follows 2024 law enforcement actions targeting individuals allegedly linked to the group. Recent reports indicate that threat actors using tactics consistent with Scattered Spider targeted a U.K. retail organization with DragonForce ransomware.  “Recent public reporting has suggested that threat actors used tactics consistent with Scattered Spider to target a UK retail organization and deploy DragonForce ransomware,” Mandiant researchers wrote in a blog…

Bitdefender exposes Facebook ad scams using fake crypto sites and celebrity lures to spread malware via malicious desktop clients and PowerShell scripts. A persistent malware campaign is exploiting Facebook’s advertising network to target cryptocurrency enthusiasts, security researchers at Bitdefender revealed today. The operation leverages the trusted names of major cryptocurrency exchanges like Binance and TradingView, and images of celebrities such as Elon Musk and Zendaya in Facebook ads to lend credibility to the fake cryptocurrency exchange promotions and lure unsuspecting users into downloading malicious software. Source: Bitdefender Bitdefender’s investigation, shared with Hackread.com ahead of its publishing, found a multi-layered attack…