Author: HackWatchit
Ever wonder where Transportation Security Administration (TSA) dogs learn the skills that make them one of the agency’s most visible security tools? The answer lies at Joint Base San Antonio-Lackland, Texas, home to TSA’s Canine Training Center. The $12 million facility spans 25,000 square feet, with seven classrooms, a 100-seat auditorium, and kennels that house about 350 dogs. But its most distinctive feature is its 17 indoor training venues designed to mirror real-world transportation environments. These include airport gates, checkpoints, baggage claim areas, air cargo facilities, light rail cars, and even the interior of a passenger aircraft. The goal is…
Cutting security costs may seem attractive from a budget perspective. However, the financial consequences of inadequate protection can be devastating. A single ransomware attack has bankrupted mid-sized businesses, while high-profile breaches at global corporations have led to multi-billion-dollar losses, fines, and reputational damage. Cutting corners on security doesn’t just risk downtime: it can jeopardize the survival of the entire company. Effective cybersecurity doesn’t have to break the bank, it’s about investing in the right tools and strategies that deliver maximum protection per dollar spent. Controlling expenses and making smarter budget allocations is a natural priority for any business, especially for…
Researchers have disrupted an operation attributed to the Russian state-sponsored threat group Midnight Blizzard, which sought access to Microsoft 365 accounts and data. Also known as APT29, the hacker group compromised websites in a watering hole campaign to redirect selected targets “to malicious infrastructure designed to trick users into authorizing attacker-controlled devices through Microsoft’s device code authentication flow.” The Midnight Blizzard threat actor has been linked to Russia’s Foreign Intelligence Service (SVR) and is well-known for its clever phishing methods that recently impacted European embassies, Hewlett Packard Enterprise, and TeamViewer. Random target selection Amazon’s threat intelligence team discovered the domain names used in the…
Crooks exploit Meta malvertising to target Android users with Brokewell Pierluigi Paganini September 01, 2025 Cybercriminals spread Brokewell via fake TradingView Premium ads on Meta, stealing crypto and data with remote control since July 2024. Bitdefender warns threat actors are abusing Meta ads to spread fake TradingView Premium apps for Android, delivering Brokewell malware to steal crypto and data. “Bitdefender researchers recently uncovered a wave of malicious ads on Facebook that lure targets with promises of a free TradingView Premium app for Android.” warns Bitdefender. “This campaign shows how cybercriminals are fine-tuning their tactics to keep up with user behavior.…
Security’s Silent Revolution: How StrikeReady is Transforming SOC Operations Security operations centers (SOCs) have long been the unsung heroes of cybersecurity, battling endless alerts and wrestling with fragmented toolsets. But what if there was a way to streamline their most complex challenges? Enter StrikeReady, a startup born from the collective expertise of FireEye veterans who intimately understand the daily struggles of security teams. Alex Lanstein, CTO of StrikeReady, cuts straight to the heart of the problem: “We understand 90% of the challenges in a SOC, and they’re ubiquitous across organizations.” This bold statement isn’t just marketing hyperbole – it’s a…
More than 80 percent of large U.S. companies were targeted by socially engineered fraud in the past year, according to Trustmi’s 2025 Socially Engineered Fraud & Risk Report. Nearly half of those organizations reported a direct financial loss, with many incidents costing more than $500,000. The findings show that these attacks are recurring problems that disrupt operations, trigger audits, and shake trust across the business. CISOs who treat fraud as a rare finance problem may be missing its broader impact. Where silos become attack surfaces The report highlights misalignment between finance and security as a key driver of risk. One-third…
The recent mass-theft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before hackers can exploit them. Now Google warns the breach goes far beyond access to Salesforce data, noting the hackers responsible also stole valid authentication tokens for hundreds of online services that customers can integrate with Salesloft, including Slack, Google Workspace, Amazon S3, Microsoft Azure, and OpenAI. Salesloft says its products are trusted by 5,000+ customers. Some of the bigger names are visible…
In brief California governor Gavin Newsom has been trolling President Donald Trump in an ongoing campaign. In his latest idea to poke fun at the crypto-friendly president, Newsom said he will release his own meme coin. Democrats have criticized President Trump’s crypto ventures, particularly his meme coin, Official Trump. California governor Gavin Newsom has said he will release his own meme coin in the Democratic politician’s latest dig at President Donald Trump. Newsom said Friday on the Pivot with Kara Swisher and Scott Galloway podcast that he’d step up his campaign to mock President Trump by releasing “Trump Corruption Coin.” The California…
The U.S. National Institute of Standards and Technology (NIST), through its National Cybersecurity Center of Excellence (NCCoE), has introduced a decentralized data approach to help manufacturers and critical infrastructure sectors secure their supply chains and operational environments. The paper introduces a meta-framework designed to enhance traceability across diverse supply chains by enabling structured recording, linking, and retrieval of traceability data. As part of this effort, NIST released a Minimal Viable Product (MVP) Reference Implementation (RI) to test experimental supply chain ecosystems in a controlled lab setting. The implementation examines how traceability data can be shared across industries and critical end-use…