Author: HackWatchit

Introduction Websites that handle personal data from Australian residents must comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988. The Office of the Australian Information Commissioner (OAIC) enforces these laws, and non-compliance can result in legal penalties and reputational harm. Many businesses operating in Australia are caught unprepared when it comes to OAIC compliance requirements. This guide offers actionable steps to help you align your site with APPs and explains how Feroot Security makes ongoing compliance simple and scalable. Whether you’re handling email addresses, IP addresses, or other personal identifiers, proper privacy management solutions are essential for…

Introduction In the business world, operational resilience can be compared to the physical concept of resilience, which defines the ability of a material to return to its original state after being subjected to an external force. In the cybersecurity landscape, this idea is further expanded by the concept of antifragility, introduced by Nassim Taleb, which suggests that truly robust systems not only withstand shocks but also evolve and strengthen in response to them. Imagine a global retail giant during Black Friday facing a ransomware attack that disrupts part of its digital infrastructure. A resilient organization would not only restore operations…

Tens of thousands of Department of Homeland Security employees have until Monday night to decide whether to voluntarily step away from their jobs, and in many cases, long careers at DHS. Homeland Security Secretary Kristi Noem sent details of the offer to DHS employees on Monday, April 7, in an email, “Reshaping of the DHS Workforce.” The “Workforce Transition Program” gives DHS employees who want to leave three options: deferred resignation, early retirement or a voluntary separation payment. DHS employees who are eligible to participate have until Monday, April 14, at 11:59 p.m. EST to decide whether to take one…

Originally aired on December 14, 2020 Articles discussed in this episode: Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-What-You-Can Training Available live/virtual and on-demand

The scale of cyberattacks seen today is both unprecedented and harrowing. Crucial sectors including healthcare, finance, and education have found themselves increasingly under attack, with hackers leaving behind a trail of breached systems, stolen data, and disrupted operations. Focusing on just the healthcare sector specifically, the statistics speak for themselves: last year businesses and institutions experienced 809 data breaches, a 136% increase from the prior year with over 56 million individuals affected. In terms of attacks, the financial sector was not far behind, with 744 breaches impacting 61 million people. These numbers serve as a serious reminder that no organisation…

​Microsoft is gradually rolling out the AI-powered Windows Recall feature to Insiders in the Release Preview channel before making it generally available to all Windows users with Copilot+ PCs. Recall is an opt-in Windows feature that screenshots active windows every few seconds, analyzes them, and allows Windows 11 users to search text within the snapshots using natural language. As the Windows Insider Program Team said on Thursday, Recall can be paused whenever needed and will only allow access to the data it captures after authenticating via Windows Hello. “To use Recall, you will need to opt-in to saving snapshots, which…

Ransomware attacks increased by nearly 20% in 2024, and the severity rose by 13%, according to At-Bay. The blast radius of ransomware continues to grow as businesses impacted by attacks on vendors and partners increased 43%, while the average cost of these third-party incidents jumped by 72%. “Remote access tools like VPNs and RDP continue to attract a high level of attention from cybercriminals. In 2024, they were correlated with 80% of ransomware attacks, up from 63% the year prior,” said Adam Tyra, CISO for Customers at At-Bay. “VPNs alone were a factor in 2 of 3 ransomware incidents. This…

Oracle confirms the hack of two obsolete servers hacked. No Oracle Cloud systems or customer data were affected Pierluigi Paganini April 10, 2025 Oracle confirmed a hacker stole credentials from two obsolete servers but said no Oracle Cloud systems or customer data were affected. Oracle confirmed a hacker stole and leaked credentials from two obsolete servers, but said no Oracle Cloud systems or customer data were affected. The threat actor accessed usernames from two outdated, non-Oracle Cloud Infrastructure (OCI) servers, but no customer data was exposed. “Oracle would like to state unequivocally that the Oracle Cloud—also known as Oracle Cloud…

As public transportation evolves, bus systems face new risks. Many systems still rely on older technology (outdated OT devices – such as standalone diagnostic tools), which wasn’t built to handle today’s complex cyber attacks. While modern buses use technologies like collision avoidance (ADAS) and dedicated short-range communications (DSRC) for vehicle-to-everything (V2X) and vehicle-to-infrastructure (V2I) communication to enhance safety and efficiency, some critical systems like telematics and vehicle control units (VCU) are often overlooked. This leaves them vulnerable to potential threats, highlighting the need for strong cyber security controls to protect the entire bus ecosystem. Public Wi-Fi also presents a hidden…