Author: HackWatchit

A cyber attack briefly disrupted South African Airways operations Pierluigi Paganini May 09, 2025 A cyberattack briefly disrupted South African Airways’ website, app, and systems, but core flight operations remained unaffected. South African Airways (SAA) is the national flag carrier of South Africa, the airline is wholly owned by the South African government and has subsidiaries including SAA Technical and Air Chefs. A cyberattack hit South African Airways, briefly disrupting its website, app, and systems. The IT team contained the incident and “minimized disruption to core flight operations.” “6 May 2025 – South African Airways (SAA) announced today that it…

A clever malware campaign delivering the novel Noodlophile malware is targeting creators and small businesses looking to enhance their productivity with AI tools. But, in an unusual twist, the threat actors are not disguising the malware as legitimate software, but as content / output created by a legitimate-looking AI tool. AI as a social engineering lure “As AI surges into mainstream adoption, millions of users turn daily to AI-powered tools for content creation,” Morphisec security researcher Shmuel Uzan noted. When searching for such tools online, some of them will consult popular Facebook groups and be lured by viral posts on…

In brief Wellgistics Health plans to build out an XRP treasury and XRP-enabled payment infrastructure, using a $50 million equity line of credit. The healthcare infrastructure company aims to connect manufacturers directly to pharmacies with its blockchain-powered payment infrastructure. The firm is one of the latest public companies to add crypto to its corporate treasury. Wellgistics Health, a publicly traded healthcare infrastructure firm, plans to accept payments in XRP and will add Ripple Labs’ token to its corporate treasury—aligning the business with a growing list of publicly traded companies that have embraced digital assets in the U.S. Tampa-based Wellgistics plans to…

We’re thrilled to officially announce our integration with Nozomi Networks, the recognized leader in OT and IoT cybersecurity. Get the full story in our press release. If you work in healthcare, manufacturing, energy, or any other OT-heavy industry, this is one update you’ll want to stick around for. Why does this matter? Because securing operational technology (OT) and IoT environments is high-stakes. These environments are cluttered with legacy systems, unpatched firmware, and devices that can’t tolerate agents or downtime. Yet they’re the backbone of our critical infrastructure. That’s exactly why this integration makes sense—because it’s designed for how OT and…

Sally Vandeven// TL;DR – Passwords stored using reversible encryption, even if they are VERY LONG,  can be trivially reversed by an attacker. Password cracking is quite enjoyable. It is very satisfying to launch Hashcat, throw a bunch of hashes at it and watch the progress over minutes, which turns into hours and then days. It does this all while you are working on another test, walking the dog, or perhaps sipping cocktails on the beach. A password cracker works by taking a potential password, say Autumn2018, and calculating its hash. Hashcat then compares the newly calculated hash that represents Autumn2018 to the list of hashes…

Oh dear, what a shame, never mind. Yes, it’s hard to feel too much sympathy when a group of cybercriminals who have themselves extorted millions of dollars from innocent victims have found themselves dealing with their own cybersecurity problem. And that’s just what has happened to the notorious LockBit ransomware gang, which has been given a taste of its own medicine. The infamous ransomware-as-a-service (RaaS) operation, which has been behind some of the highest-profile ransomware attacks in history, has itself been breached and had its secrets spilt for anybody to see. Earlier this week, attacker breached the LockBit group’s infrastructure, defaced its interface used…

US Customs and Border Protection (CBP) has quietly rescinded several internal policies that were designed to protect some of the most vulnerable people in its custody—including pregnant women, infants, the elderly, and people with serious medical conditions.The decision, outlined in a memo dated May 5 and signed by acting commissioner Pete Flores, eliminates four Biden-era policies enacted over the last three years. These policies were intended to address CBP’s long-standing failures to provide adequate care for detainees who are most at risk—failures that have, in some cases, proved fatal.The May 5 memo was distributed internally to top agency leadership but…

The U.K. government has introduced a voluntary Software Security Code of Practice to enhance the security and resilience of software used by organizations and businesses. It aims to help software vendors and their customers reduce the likelihood and impact of supply chain attacks and other resilience-related incidents, which often stem from avoidable weaknesses in software development and maintenance. Poor communication between organizations and software suppliers can further worsen these issues. Developed through extensive consultation with the National Cyber Security Centre (NCSC), industry, and academia, and refined through public feedback gathered between May and August 2024, the Code outlines 14 principles…

Whether you’re preparing for interviews or building Machine Learning systems at your job, model compression has become a must-have skill. In the era of LLMs, where models are getting larger and larger, the challenges around compressing these models to make them more efficient, smaller, and usable on lightweight machines have never been more relevant. In this article, I will go through four fundamental compression techniques that every ML practitioner should understand and master. I explore pruning, quantization, low-rank factorization, and Knowledge Distillation, each offering unique advantages. I will also add some minimal PyTorch code samples for each of these methods.…