Author: HackWatchit

Michael Allen // Every year around the holidays I end up having a conversation with at least one friend or family member about the importance of choosing unique passwords for each web site or service they use. Usually, it’s after they’ve received a phone or a camera or some other “smart” device for Christmas and have asked me to help them set it up. Most recently, it was when a friend told me his eBay account got hacked, and he asked me how he could keep it from happening again in the future. I told him that it was likely…

Mobile network opreator SK Telecom, which serves approximately 34 million subscribers in South Korea, has confirmed that it suffered a cyber attack earlier this month that saw malware infiltrate its internal systems, and access data related to customers’ SIM cards.The breach occurred at around 11pm local time, on the night of Saturday 19 April 2025, in what is believed to have been an attack intentionally timed to exploit a day and time when there may be less staff monitoring in place.Responsibly, SK Telecom informed the Korean Internet & Security Agency (KISA) the following day, and fulfilled its legal obligation to…

Blockchain infrastructure provider dRPC has announced the launch of a NodeHaus platform that enables chain foundations unprecedented control over their RPC infrastructure. It provides real-time RPC monitoring, delivering actionable insights to support data-driven infrastructure management. NodeHaus helps foundations understand how their infrastructure performs across regions, providers, and methods. It incorporates powerful tools for maintaining high availability and optimizing traffic distribution. Serving as a strategic data visualisation and control panel for RPC infrastructure, NodeHaus bridges the gap between technical performance and strategic decisions. This helps to make RPC infrastructure behaviour measurable and accountable, simplifying the task of managing ecosystem growth. The…

Dynamic hybrid data center cloud environments are growing, leading to a larger attack surface. The mix of on-premises and multiple cloud platforms creates complex interconnections that are hard to monitor. Traditional network segmentation is insufficient as workloads move fluidly between on-premises data centers and the cloud, leaving protection gaps. Without proper tools, security professionals lack full visibility, allowing lateral threats to go undetected and spread within the organization. Proactively Stopping Lateral Movement to Prevent Breaches Check Point Software Technologies Ltd and Illumio announced a strategic partnership to enable enterprises to prevent lateral movement and breaches through microsegmentation and proactive threat…

Aleph.im, a pioneer in decentralized infrastructure since 2019, today announces its rebrand to Aleph Cloud, reflecting its evolution into a full-stack decentralized cloud platform. The new brand unifies its broad suite of services including decentralized compute, storage, virtual machines, and GPU resources, under one brand built to meet the infrastructure demands of modern Web3 and AI applications. As centralized cloud failures like the recent AWS outage continue to disrupt major crypto exchanges and dApps, Aleph Cloud offers a timely alternative: permissionless, censorship-resistant infrastructure running on over 700 nodes in 12 countries. Its offering also includes a developer-friendly SaaS platform that…

From startups to global enterprises, businesses are rapidly moving to the cloud. Cloud computing has truly kicked off how businesses operate through scalability, flexibility, or the cost efficiency it provides. As organizations increasingly migrate to the cloud, cybersecurity threats are evolving, making cloud security a critical priority. According to IBM, it’s estimated that 82% of data breaches involve cloud-stored data, drawing close attention to the urgent need for strong cloud security measures. In the past five years, cloud ransomware incidents have increased by 13%.  As cloud environments become more complex, ensuring robust security for your cloud infrastructure is no longer…

, I present my latest open-source project — Government Funding Graph. The inspiration for this project came from a desire to make better tooling for grant writing, namely to suggest research topics, funding bodies, research institutions, and researchers. I have made Innovate UK grant applications in the past, so I have had an interest in the government funding landscape for some time. Concretely, a lot of the recent political discourse focuses on government spending, namely Elon Musk’s Department of Government Efficiency (DOGE) in the United States and similar sentiments echoed here in the UK, as Kier Starmer looks to integrate AI into government. Perhaps…

Interlock ransomware gang started leaking data allegedly stolen from leading kidney dialysis firm DaVita Pierluigi Paganini April 25, 2025 The Interlock ransomware gang claimed responsibility for the attack on the leading kidney dialysis company DaVita and leaked alleged stolen data. DaVita Inc. provides kidney dialysis services through a network of 2,675 outpatient centers in the United States, serving 200,800 patients, and 367 outpatient centers in 11 other countries, serving 49,400 patients. DaVita specializes in treating end-stage renal disease (ESRD), requiring patients to undergo dialysis three times a week unless they receive a kidney transplant. The company holds a 37% share of the U.S.…

BHIS’ Defensery Driven Duo Delivers Another Delectable Transmission! We know you are worried about your networks. After hours of discussion, we’ve come to the realization that some of our dedicated followers seem to be much more interested in catching malware than learning how to be (please forgive this next statement) “l33t hax0rs.” Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_LetsTalkAboutELKBaby.pdf 2:47 – Why Are We Doing This? 5:07 – AT7: The Logs You Are Looking For 7:41 – AD Best Practices to Frustrate Attackers 9:37 – AT 5 – Complete Takedown & AT 6 – IOCs 12:04 – Blue Team-A-Palooza 14:22 – Windows Logging, Sysmon, and…