Author: HackWatchit

In today’s digital age, where vast amounts of personal and business information are shared and stored online, two terms often come up: data privacy and data security. While they are closely related and essential for protecting sensitive information, they refer to different aspects of information protection. Understanding the difference between them is key to ensuring that data is handled responsibly and safely. What is Data Privacy? Data privacy refers to the way personal information is collected, stored, shared, and used. It is concerned with the rights of individuals to control their personal data and the rules that govern the handling…

Authored by: Ryan MacLennan Last year, Black Hat asked Cisco Security if we could be the Single Sign-On (SSO) provider for all the partners in the Black Hat NOC. The idea is to centralize our user base, make access to products easier, provide easier user management, and to show role-based access. We started the proof-of-value at Black Hat Asia 2024 and partially deployed at Black Hat Europe 2024. We have successfully integrated with the partners in the Black Hat NOC to enable this idea started a year ago. Below is a screenshot of all the products we have integrated with…

For this webcast we cover a couple of different topics. First, we talk about how to password spray in a non-attributable sort of way. Beau found a way to obfuscate what RDP logs record with launching password spraying attacks. This has implications for UBEA. It is… kind of cool. Second, we cover how to do recon against Azure Active Directory. We are seeing a huge push by organizations to move to cloud AD. And what is not to love? Placing your most sensitive authentication and authorization asset directly on the Internet…What could possibly go wrong? Well, watch and find out.…

Tell us about your journey as a cybersecurity professional.My journey in cybersecurity began during the first year of my engineering studies. At that time, there was a noticeable rise in cybercrime cases, and I came across news stories about people losing large sums of money due to online fraud. These incidents really caught my attention and inspired me to do something meaningful in this field.I was fortunate to have a few seniors in college who were already exploring the cybersecurity domain. Their guidance and encouragement influenced me greatly, and I decided to start learning more about the field. As I…

A missing authentication vulnerability (CVE-2025-3248) in Langflow, a web application for building AI-driven agents, is being exploited by attackers in the wild, CISA has confirmed by adding it to its Known Exploited Vulnerabilities (KEV) catalog. About CVE-2025-3248 Langflow is an open-source, Python-based app that allows users to create AI agents (e.g., chatbots assistants) and workflows without actually writing any code. Instead, they simply drag, drop and chain LLM components and add the neccessary inputs. Unfortunately, as Horizon3.ai researchers discovered, all Langflow versions before version 1.3.0 have an unauthenticated API endpoint (/api/v1/validate/code) that accepts any user input and runs it without…

Cyber attackers continue to adapt — and so must defenders. Join us for an expert-led discussion unpacking the latest trends from over 500 incident response cases, including the evolution of extortion, software supply chain attacks, cloud vulnerabilities and emerging AI-driven threats. We’ll explore how techniques are shifting, what this means for public and private sector organizations and how security teams can strengthen their resilience in an increasingly complex landscape. Key Topics: Evolving extortion techniques: From encryption to exfiltration and disruption Software supply chain and cloud: Third-party risks, phishing, and identity defenses Insider threats and AI: From fake IT workers to…

The world is moving faster than ever. AI, cloud networks and more distributed workforces are driving business growth and innovation. These advancements bring tremendous opportunities, but they also introduce new security challenges, like AI-driven threats, expanding attack surfaces and a more complex landscape reshaping the road ahead. As your organization continues to grow and innovate, staying ahead of these risks is crucial. But here’s the good news – your security doesn’t have to slow you down or disrupt innovation. With the right solutions and strategies, you can ensure that your security ecosystem works seamlessly alongside your growth, empowering your team…

BTC retreats, Nvidia considering BTC treasury, SOL fixes zero-dayBTC retreats, Nvidia considering BTC treasury, SOL fixes zero-day FOMO HOUR EP350 BTC hits $97.9k then underperforms. Nvidia considering BTC treasury. Arizona governor vetoes BTC bill. Saylor hints at another BTC purchase. Trump reiterates support for crypto. SOL fixes zero-day exploit. Goldman Sachs to offer tokenised treasuries. US unlikely to increase BTC holdings: Hayes. Two key crypto policy leaders of IRS exit. Tether to launch AI project. Vitalik wants to speed up ETH by 100x. Bybit to launch tradfi trading . Brown University invests in BTC ETF. Whale who held 76k ETH…

The U.S. Department of Defense (DoD) released on Monday details of an initiative, ‘Accelerating Secure Software,’ and kicked off a 90-day sprint to develop the Software Fast Track (SWFT) framework and implementation plan. The move will lead the Department’s adoption of best practices to obtain, develop, and field secure software. The SWFT Initiative will define clear, specific cybersecurity and Supply Chain Risk Management (SCRM) requirements; rigorous software security verification processes; secure information sharing mechanisms; and federal government-led risk determinations to expedite the cybersecurity authorizations for rapid software adoption. Signed by Katie Arrington, performing the duties of the DoD Chief Information…