Author: HackWatchit

Users of popular payments apps PayPal and Venmo will soon be able to buy, sell, hold, and transfer Solana and Chainlink from directly inside their accounts alongside leading cryptocurrencies Bitcoin and Ethereum. PayPal said that adding the new coins, which are both among the top 15 most valuable cryptocurrencies by market cap respectively according to data from CoinGecko, reflects the company’s “dedication to the evolving digital currency landscape.”“Since we initially made cryptocurrencies available on PayPal and Venmo, we’ve been listening to our users about what they want to do with crypto on our platforms,” said May Zabaneh, PayPal’s VP of product,…

RSA Conference (RSAC) is one of the largest cybersecurity gatherings in the world, and our team at D3 Security is excited to join this year’s event to showcase Morpheus AI at Booth N-4400 in the North Expo. If you’re heading to San Francisco this April 28, to May 1, we hope you’ll stop by for a live demo of autonomous SOC capabilities in action. Named for the pioneering cryptographers behind the RSA algorithm (Ron Rivest, Adi Shamir, and Leonard Adleman), RSAC has evolved into a massive, enriching whirlwind of activity. You’ll experience buzzing expo floors, thought-provoking keynotes, and endless opportunities…

How to make sure your antivirus is working without any malware  Michael Allen // Recently, a customer asked me if there was a way they could generate alerts from the new antivirus product they deployed without executing any actual malware on the system they were testing it on. The computer they wanted to test was an especially sensitive and business-critical system, so it was important that they perform the test without executing any third-party code. Additionally, I wouldn’t have direct access to the system they were testing (this question came up after their pentest was already complete), so the methods I shared with them needed to be easily communicated to a system administrator and not rely on any specialized “hacking tools” like…

Cloud services have revolutionized the way businesses operate, delivering instant access to data, applications and resources at the touch of a mouse. Accessibility through a mix of public cloud services, SaaS applications, private clouds, and on-premises infrastructure has become the norm, helping companies to operate with greater agility, scale faster and reduce IT costs. It should come as no surprise, then, that 90% of organizations are predicted to adopt a hybrid cloud approach by 2027.  As beneficial as hybrid and multi-cloud environments are, however, they present their own fair share of challenges—particularly when it comes to security, management, and cost…

Cisco released its 2025 Data Privacy Benchmark Study. The report looks at global trends in data privacy and how they affect businesses. The study gathered responses from 2,600 privacy and security experts in 12 countries. It highlights the need for strong data privacy practices to fully benefit from AI. Privacy remains core to customer trust (Source: Cisco) “Privacy and proper data governance are foundational to Responsible AI,” said Dev Stahlkopf, Cisco Chief Legal Officer. “For organizations working toward AI readiness, privacy investments establish essential groundwork, helping to accelerate effective AI governance.” Safety worries push companies toward local data storage Despite…

CERT-UA reports attacks in March 2025 targeting Ukrainian agencies with WRECKSTEEL Malware Pierluigi Paganini April 04, 2025 CERT-UA reported three cyberattacks targeting Ukraine’s state agencies and critical infrastructure to steal sensitive data. The Computer Emergency Response Team of Ukraine (CERT-UA) reported three cyberattacks in March 2025 targeting Ukrainian agencies and infrastructure to steal sensitive data. This activity is tracked under the identifier UAC-0219. “The Ukrainian government’s computer emergency response team, CERT-UA, is taking systematic measures to accumulate and analyze data on cyber incidents in order to provide up-to-date information on cyber threats.” reads the report published by CERT-UA. “Thus, during…

Join our Incident Master Ean Meyer as we play another round of Backdoors & Breaches (B&B) session using our new Tabletop Simulator (TTS) version! If you have STEAM / TABLETOP SIMULATOR / BACKDOORS & BREACHES WORKSHOP, you can play using the same version of the game. https:/steamcommunity.com/sharedfiles/filedetails/?id=2401033477 Incident Master: Ean | EanMeyer Defenders: Qasim | hashtaginfosec Kaitlyn | Kadawi Blake | zer0cool Vee | Po1Zon_P1x13 Ralph | ralphte1 Game Play Master: Jason | BanjoCrashland Our good friend Edward Miro wrote an extensive guide on how to install and use B&B on TTS. Check it out below! https://www.blackhillsinfosec.com/backdoors-breaches-tabletop-simulator-guide/ Ready to learn…

Following last year’s release of an initial public draft for public comment, the U.S. National Institute of Standards and Technology (NIST) published this week finalized Special Publication (SP) 800-61 Revision 3. The document seeks to assist organizations with incorporating cybersecurity incident response recommendations and considerations throughout their cybersecurity risk management activities as described by the NIST Cybersecurity Framework (CSF) 2.0. NIST SP 800-61 Rev. 3 focuses on improving cybersecurity risk management for all of the NIST CSF 2.0 Functions to better support an organization’s incident response capabilities.  The scope of Rev. 3 differs significantly from previous versions. Due to the…

The Government Accountability Office (GAO) evaluated the coordination between the Drug Enforcement Administration (DEA) and Homeland Security Investigations (HSI) regarding cross-designated counternarcotics operations. Between FY 2019 and 2023, DEA authorized over 4,000 HSI agents annually to participate in drug investigations, focusing on smuggling across U.S. borders. However, DEA lacks tracking mechanisms for processing times of these authorizations and has not set timeliness goals. Additionally, although DEA and HSI agreed in 2021 to implement two joint training modules to enhance collaboration, these have yet to be finalized due to ongoing disputes over content. The agencies have not utilized their agreed-upon dispute…