Author: HackWatchit

There is constant pressure on security leaders to decide which controls deserve the most attention and budget. A new study offers evidence on which measures are most closely linked to lower breach risk and how organizations should think about deploying them. Marsh McLennan’s Cyber Risk Intelligence Center (CRIC) analyzed thousands of organizations’ responses to its Cyber Self-Assessment and compared them with claims data. The findings highlight which controls matter most for lowering breach likelihood. Incident response planning Incident response planning ranked near the top of the study’s findings. Organizations that conduct tabletop exercises and red-team tests consistently showed better outcomes…

Eric White So tell us about this latest bill in the Senate that looks to protect against quantum cryptography attacks, and then we can kind of go into where things currently lie. Rebecca Krauthamer Absolutely. So since 2022, there’s been sort of a string of government action in the U.S. saying first, hey, look, take this very seriously, start looking at your encryption, start inventorying. All the way through to now, so in January, there was an executive order that really pushed things a little bit further once again. And now we’re seeing yet again, there is another act that’s…

Supply-chain attack hits Zscaler via Salesloft Drift, leaking customer info Pierluigi Paganini September 01, 2025 Zscaler breach tied to Salesloft Drift attack exposed Salesforce data, leaking customer info and support case details in a supply-chain compromise. Zscaler discloses a data breach that is linked to the recent Salesloft Drift attack. The cybersecurity vendor confirmed it was affected by a campaign targeting Salesloft Drift, a marketing SaaS integrated with Salesforce. Threat actors stole OAuth tokens from the company, the incident impacted multiple Salesforce customers, including Zscaler. Attackers gained unauthorized access to Drift credentials, allowing limited visibility into some of Zscaler’s Salesforce…

Penlink’s CEO, Peter Weber, shares how leaders can reduce their odds of becoming yet another statistic through a debilitating cyber-attack by implementing the robust combination of digital evidence, open-source intelligence (OSINT), artificial intelligence (AI), and data analytics in this expert Q&A segment. Plagued by ongoing cyber threats while coping with an unprecedented labor shortage, leaders across sectors must remain resilient to address all aspects of their organization’s operational wellness. Simply put, an organization’s CEO and leadership team have a lot on their plates. Though detecting cyber risks is far from the sole challenge faced by organizations in the digital age, it…

A new report reveals North Korea-linked ScarCruft is using RokRAT malware to target academics in a phishing campaign. Read about the cyber-espionage threat and the group’s evolving tactics. Cybersecurity researchers from Seqrite Labs have discovered a new and highly targeted attack campaign linked to North Korea. The hacking group, known as ScarCruft or APT37, is deploying a malicious tool called RokRAT to spy on South Korean academics, researchers, and former government officials. This operation has been named HanKook Phantom– HanKook means Korea, while Phantom represents the stealthy and evasive nature of the attack. A Deceptive Attack The attacks begin with…

Cybersecurity company Zscaler warns it suffered a data breach after threat actors gained access to its Salesforce instance and stole customer information, including the contents of support cases. This warning follows the compromise of Salesloft Drift, an AI chat agent that integrates with Salesforce, in which attackers stole OAuth and refresh tokens, enabling them to gain access to customer Salesforce environments and exfiltrate sensitive data. In an advisory, Zscaler says that its Salesforce instance was impacted by this supply-chain attack, exposing customers’ information. “As part of this campaign, unauthorized actors gained access to Salesloft Drift credentials of its customers including Zscaler,”…

(or 2010s to be more precise) big-data boom brought the emergence of specialization in data roles. What used to be solely described as “Business Intelligence Engineer” was further broken down into Business Intelligence Engineers/Analysts, Data Engineers/Analysts, Data Scientists etc. The reason for this? The abundance of data, and the multidisciplinary responsibilities that come with it, which could not be tamed by one generic job description. So, there was a need to break it down to smaller pieces because of the variety of day-to-day tasks. Approaching the end of 2025 though, are we now going back to more generalized data roles? The…

The rapid deployment of large language models (LLMs) has introduced significant security vulnerabilities due to misconfigurations and inadequate access controls. This paper presents a systematic approach to identifying publicly exposed LLM servers, focusing on instances running the Ollama framework. Utilizing Shodan, a search engine for internet-connected devices, we developed a Python-based tool to detect unsecured LLM endpoints. Our study uncovered over 1,100 exposed Ollama servers, with approximately 20% actively hosting models susceptible to unauthorized access. These findings highlight the urgent need for security baselines in LLM deployments and provide a practical foundation for future research into LLM threat surface monitoring.…

Introduction: Addressing the Unavoidable Nature of Cyber Risk In a rapidly evolving cyber threat landscape, the need for sophisticated and multifaceted risk management has never been more apparent. While traditional cybersecurity measures remain essential, no defense is infallible. A breach is not just possible; it’s statistically likely, especially in sectors where digital transformation is outpacing the security infrastructure’s ability to keep up. This inherent vulnerability has paved the way for a new era in which cyber insurance does more than transfer risk—it complements and enhances cybersecurity efforts. The convergence of these two domains provides a resilient approach to managing risk,…