Author: HackWatchit
Government agencies are under immense pressure to modernize, both from the legislature and constituents demanding a digital-first experience. Advances in autonomous AI agents open new opportunities to leverage Software as a Service (SaaS) to improve the cost effectiveness, efficiency, and quality of government operations and services. To take full advantage of the power of agentic Artificial Intelligence (AI), agencies must satisfy their part of the SaaS shared responsibility model to properly protect their data. SaaS security is not only essential to defend against increasing threats and to comply with government mandates – AI agents depend on the confidentiality, availability, and…
New malware ‘ResolverRAT’ targets healthcare, pharmaceutical firms Pierluigi Paganini April 14, 2025 New malware ‘ResolverRAT’ is targeting healthcare and pharmaceutical firms, using advanced capabilities to steal sensitive data. Morphisec researchers discovered a new malware dubbed ‘ResolverRAT’ that is targeting healthcare and pharmaceutical firms, using advanced capabilities to steal sensitive data. ResolverRAT spreads via phishing emails using localized languages and legal lures. Victims download a malicious file triggering the malware. The multi-language tactic suggests a global, targeted campaign aimed at boosting infection success across regions. “ResolverRAT is a newly identified remote access trojan that combines advanced in-memory execution, API and resource…
DaVita, a major player in the kidney dialysis industry, has recently fallen victim to a ransomware attack. Fortunately, there have been no reports of the breach affecting patient-related services as of now. However, the situation could become more concerning if the hackers choose to release or sell the stolen data. If that happens, it could lead to a surge in phishing attacks and identity theft. While the full impact of the ransomware attack on DaVita’s operations is still under investigation, it’s important to understand the broader evolution of file-encrypting malware and its implications. The Shift to Double Extortion Traditionally, ransomware…
Highlights Lloyds Banking Group is planning to launch a consumer-facing AI agent as early as August, a feat it would achieve in just a year. Coinbase created its own generative AI platform, Coinbase-GPT, and enabled employees to create their own AI avatars in Slack. Both companies are more confident about their guardrails protecting against hallucinations compared to a year ago. Lloyds Banking Group, one of the U.K.’s largest financial services firms, is planning to launch a consumer-facing AI agent as early as August. That’s according to Lloyds Chief Data and Analytics Officer Ranil Boteju, who said during a recent Google…
Data breach at Laboratory Services Cooperative (LSC) exposed the sensitive health and personal information of 1.6 million individuals linked to select Planned Parenthood centers. Learn if you’re affected and what data was compromised. A US-based lab testing services provider, Laboratory Services Cooperative (LSC), has confirmed that hackers broke into their computer systems in October 2024 and got the personal information of about 1.6 million people. For your information, LSC is a non-profit group in Seattle, Washington. It started working with different Planned Parenthood centres at different times, some only in the last few years. It currently provides lab testing for…
The U.S. Government has emphasized a clear priority of modernizing federal technology and software while maximizing governmental efficiency and productivity. To achieve this ambitious goal, government agencies face the dual challenge of enhancing cybersecurity while streamlining operations and managing budgetary constraints. The High Costs and Risks of Legacy Networks Legacy network architectures present significant financial and security burdens for government agencies. Traditional architectures, such as multiprotocol label switching (MPLS) and virtual private network (VPN), incur substantial annual costs – on average 190% of the cost of business internet for the same amount of bandwidth. These technologies often require legacy Trusted…
Many people get started in security as a Security Operations Center (SOC) analyst. In this Black Hills Information Security (BHIS) webcast we discuss the core skills that a SOC analyst needs in order to be successful. Trust us, these skills are more than just watching the SIEM and letting the SOAR platform handle everything through a AI powered single pane of glass. Security has been and will continue to be, hard. This webcast will help people who are getting started be more successful and hopefully happier in their jobs. I mean, we can’t make people happy. But, being good at…
Non-compliance can cost organizations 2.71 times more than maintaining compliance programs, according to Secureframe. That’s because non-compliance can result in business disruption, productivity losses, fines, penalties, and settlement costs, among other factors that come with a hefty price tag. Even data breaches are more expensive if an organization is non-compliant. In recent years, organizations across various sectors have faced significant fines for non-compliance with regulations such as HIPAA, GDPR, and CCPA. The high cost of regulatory non-compliance Regulatory non-compliance can result in financial penalties ranging from thousands to millions of dollars. European regulators imposed €4.48 billion in fines across 2,086…
Unanticipated cyber threats can rapidly exhaust cyber security budgets and derail carefully planned strategies. Among these challenges, distributed denial of service (DDoS) attacks stand out as a prime example of how unexpected risks can disrupt even the most secure systems. DDoS Attack at SJD-Bank (fictitious) It was a routine evening at SJD-Bank’s security operations center (SOC), where the team was wrapping up case analyses before the shift handover. Suddenly, a major incident alert broke the calm. An emergency bridge call was initiated to investigate a sharp spike in activity that was impacting the bank’s perimeter firewalls. The incident was also…