Author: HackWatchit
AppViewX has announced the launch of the AVX ONE Post-Quantum Cryptography (PQC) Assessment Tool that generates a Cryptographic Bill of Materials and PQC readiness score. By scanning code, dependencies, configurations and certificates in enterprise environments, the PQC Assessment Tool provides visibility and an inventory of crypto assets to identify non-PQC compliant algorithms and risk. Additional PQC capabilities include a quantum-ready PKIaaS to issue PQC-safe certificates, automated certificate lifecycle management (CLM) and crypto-agility, and secure code signing to ensure the validity and integrity of software. With quantum computers expected to break today’s encryption within the decade, organizations can no longer wait…
Following last week’s last-minute move to prevent a disruption to the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) reaffirmed on Wednesday the CVE Program’s vital role as a public resource essential to both network defenders and software developers. Matt Hartman, CISA’s acting executive assistant director for cybersecurity, clarified that the situation stemmed from a contract administration issue, not a funding shortfall, which was resolved before any lapse occurred. The CVE program has continued without interruption, and CISA remains fully committed to maintaining and enhancing this cornerstone of national…
In a recent episode of Cyber Dialogues, Bruce Byrd, Executive Vice President and General Counsel at Palo Alto Networks, shared valuable insights on the evolving cybersecurity landscape. From the critical role of public-private partnerships to the impact of AI on cyber defense, Byrd’s perspective offers cybersecurity leaders a strategic framework for navigating today’s complex threat environment. The Mission-Driven Nature of Cybersecurity For Byrd, cybersecurity isn’t just another industry; it’s a mission-critical function that helps protect economies and national security in an increasingly threatening landscape: What Palo Alto Networks does is as fundamentally important as anything I’ve ever done in my…
The FBI (Federal Bureau of Investigation), the United States’ premier law enforcement agency, has recently published its Internet Crime Report for 2024, revealing a staggering loss of approximately $16.6 billion from cybercrimes. These figures reflect the volume of complaints reported to the Internet Crime Complaint Center (IC3), an organization dedicated to tracking and analyzing cybercrime incidents. This figure represents a significant portion of the broader scope of internet-based criminal activity, which continues to evolve in both scale and sophistication. Fraud Remains the Leading Cybercrime While various types of cybercrime contribute to these losses, fraud continues to dominate the landscape as…
Ray Felch // SOFTWARE DEFINED RADIO: RF Signal Replay Techniques Disclaimer: Be sure to use a faraday bag or cage before transmitting any data so you don’t accidentally break any laws by illegally transmitting on regulated frequencies. Additionally, intercepting and decrypting someone else’s data is illegal, so be careful when researching your traffic. Preface: Recently, I was invited to collaborate with a few of my colleagues (many thanks to BB King for bringing me into his project) regarding the troubleshooting of an RF signal replay lab. Although I owned an inexpensive ($20) RTL dongle and the higher-priced ($350) HackRF One…
Yale New Haven Health (YNHHS) data breach impacted 5.5 million patients Pierluigi Paganini April 24, 2025 Yale New Haven Health (YNHHS) announced that threat actors stole the personal data of 5.5 million patients in a cyberattack. Yale New Haven Health (YNHHS) disclosed a data breach that exposed personal information of 5.5 million patients following a cyberattack that occurred earlier this month. Yale New Haven Health System (YNHHS) is a nonprofit healthcare network headquartered in New Haven, Connecticut. It stands as the largest healthcare system in the state, encompassing a comprehensive array of medical services and facilities. The system operates more…
Blue Shield of California exposed the health data of 4.7 million members to Google for years due to a Google Analytics misconfigured setup. No SSNs leaked. Blue Shield of California, a major health insurance provider, has announced that the private information of about 4.7 million of its members was exposed to Google’s advertising and analytics services. This happened over nearly three years, from April 2021 to January 2024. The insurer states (PDF) that they used Google Analytics to track how customers used their websites. A misconfiguration in this setup allowed protected health information to be collected as well, including…
Every NBA season, 30 teams compete for something only one will achieve: the legacy of a championship. From power rankings to trade deadline chaos and injuries, fans and analysts alike speculate endlessly about who will raise the Larry O’Brien Trophy. But what if we could go beyond the hot takes and predictions, and use data and Machine Learning to, at the end of the regular season, forecast the NBA Champion? In this article, I’ll walk through this process — from gathering and preparing the data, to training and evaluating the model, and finally using it to make predictions for the…
Ransomware remains the top threat to American infrastructure, with complaints in 2024 rising 9% above 2023’s total, the FBI said Wednesday (April 23). A report from the FBI’s Internet Crime Complaint Center (IC3) stated that despite international law enforcement efforts to disrupt ransomware operators and cybercrime forums, criminals are targeting critical sectors, including manufacturing, financial services, information technology, healthcare and government facilities. Nearly half of all ransomware complaints received by the IC3 last year involved those critical infrastructure organizations, the report said. The Cybersecurity and Infrastructure Security Agency (CISA) specifically defines “critical infrastructure” as encompassing 16 sectors, including energy, communications,…