Author: HackWatchit

The data-theft extortion group known as Luna Moth, aka Silent Ransom Group, has ramped up callback phishing campaigns in attacks on legal and financial institutions in the United States. According to EclecticIQ researcher Arda Büyükkaya, the ultimate goal of these attacks is data theft and extortion. Luna Moth, known internally as Silent Ransom Group, are threat actors who previously conducted BazarCall campaigns as a way to gain initial access to corporate networks for Ryuk, and later, Conti ransomware attacks. In March 2022, as Conti started to shut down, the BazarCall threat actors separated from the Conti syndicate and formed a new…

TM SGNL, a chat app by US-Israeli firm TeleMessage used by Trump officials, halts operations after a breach exposed messages and backend data. A data breach has exposed security flaws and sensitive information in TM SGNL, a chat app developed by the Israeli-US company TeleMessage. The firm is known for providing modified versions of encrypted messaging apps such as Signal, WhatsApp, Telegram, and WeChat, to the US government. This alleged breach, first reported by 404 Media, involved a hacker gaining access to archived messages, including direct and group chats. As a result, the company has temporarily suspended its operation. The…

90% of IT and security leaders said their organization experienced a cyberattack within the last year, according to a report by Rubrik. “Many organizations that move to the cloud assume their providers will handle security,” said Joe Hladik, Head of Rubrik Zero Labs. “The persistence of ransomware attacks, coupled with the exploitation of hybrid cloud vulnerabilities, shows that threat actors are always one step ahead. Companies must take action and adopt an attacker’s mindset by identifying – and protecting – the most valuable data before it’s too late. The need for a data-centric security strategy that prioritizes visibility, control, and…

Vuls is an open-source tool that helps users find and manage security vulnerabilities. It was created to solve the daily problems admins face when trying to keep servers secure. Many administrators choose not to use automatic software updates because they want to avoid downtime in production. Instead, they update systems manually. This creates challenges. Admins must watch databases like the National Vulnerability Database (NVD) for new threats. When there are many packages installed, tracking all of them becomes almost impossible. Analyzing which servers are affected takes time and costs money. It’s also easy to miss something by accident. Vuls makes…

John Strand // Yet again it is time for another edition of Sacred Cash Cow Tipping! Or, “Why do these endpoint security bypass techniques still work? Why?” The goal of this is to share just some of the ways Black Hills Information Security bypassed endpoint security in 2018. Unfortunately, these webcasts still seem to be needed because there is a prevalent attitude that it is somehow possible to get endpoint security with full synergy and it will be bulletproof and under a single pane of glass. All with cyber threat intelligence and A.I. sprinkled in with a bit of EDR…

At RSA Conference 2025, one theme echoed across the show floor: security teams don’t need more alerts—they need more certainty. As threats move faster and operations get leaner, organizations are shifting from reactive investigation to proactive, automated forensics. That’s why we’re excited to announce a major leap forward in Cisco XDR: automated forensics built into the detection and response workflow. The Modern SOC Struggles with Confidence, Not Just Complexity It’s no longer about just identifying suspicious activity. Today’s security tools can surface anomalies such as a rogue login, a strange process, or a lateral movement attempt. The real challenge? Proving what happened—and how…

Kelly Benefits December data breach impacted over 400,000 individuals Pierluigi Paganini May 05, 2025 Kelly Benefits has determined that the impact of the recently disclosed data breach is much bigger than initially believed. Benefits and payroll solutions firm Kelly & Associates Insurance Group, aka Kelly Benefits, announced that the impact of a recently disclosed data breach is much bigger than initially estimated. The U.S.-based company provides benefits, payroll, and workforce management solutions to businesses. In April, Kelly Benefits disclosed a data breach where hackers accessed its systems from Dec 12–17, 2024, stealing sensitive personal data. Initially the company believed that…

In this article, I discuss how you can fine(visual large language models, often called vLLMs) like Qwen 2.5 VL 7B. I will introduce you to a dataset of handwritten digits, which the base version of Qwen 2.5 VL struggles with. We will then inspect the dataset, annotate it, and use it to create a fine-tuned Qwen 2.5 VL, specialized in extracting hand-written text. Overview The main goal of this article is to fine-tune a VLM on a dataset, an important machine-learning technique in today’s world, where language models revolutionize the way data scientists and ML engineers work and achieve. I…

Over the past two weeks, media outlets have been rife with speculations about a significant cyber attack affecting three major UK-based companies: Marks & Spencer, Harrods, and Co-Op. Reports suggest that cybercriminals infiltrated these organizations, resulting in severe data breaches that could have long-lasting consequences for both the businesses and their customers. Recent revelations indicate that the cyber attack on Cooperative Group could potentially impact up to 20 million customers, leaving them vulnerable to fraud, identity theft, and various scams for years to come. This alarming scale of the breach is prompting widespread concern, with cybersecurity experts warning that the…