Author: HackWatchit
, I’m going to be discussing a really interesting topic that I came across in a recent draft paper by a professor at the University of Maryland named M. R. Sauter. In the paper, they discuss (among other things) the phenomenon of social scientists and pollsters trying to employ AI tools to help overcome some of the challenges in conducting social science human subjects research and polling, and point out some major flaws with these approaches. I had some additional thoughts that were inspired by the topic, so let’s talk about it! Hi, can I ask you a short series of…
The Cybersecurity and Infrastructure Security Agency (CISA) officially marked the beginning of the fourth annual Emergency Communications Month yesterday, recognizing the critical role that emergency communications play in the safety and resilience of the nation’s infrastructure. Observed each April, Emergency Communications Month serves to spotlight the people and systems that keep the lines open when disasters strike—first responders, dispatchers, and the infrastructure professionals working behind the scenes. This year’s theme, “Resilient Together,” reinforces the importance of secure, interoperable emergency communications and CISA’s commitment to working in tandem with state, local, tribal, and territorial partners. As part of its observance,…
In the competitive world where artificial intelligence (AI) has made it easy to use technology, companies are constantly looking for ways to connect with their audience without stretching resources. One proven method is outsourcing, which allows businesses to focus on core operations while leveraging expert outreach strategies. However, as with any digital transformation, there are data security concerns to consider. In this article, we’ll cover the most effective strategies for enhancing customer engagement through outsourced telemarketing, including how to protect sensitive data and maintain performance. Key Advantages of Outsourced Telemarketing Outsourced telemarketing offers numerous benefits, including cost savings, flexibility, and…
Circle’s initial public offering (IPO) filing has drawn sharp criticism from industry insiders, who question its Bitcoin strategy and broader financial stability.While the company is best known for issuing the USDC stablecoin, its recent filings have revealed details that have prompted skepticism across the crypto space.Heavy on altcoins, light on Bitcoin and EthereumCircle’s crypto holdings show a surprising underweight position in Bitcoin and Ethereum.As of Dec. 31, 2024, the company held just 73 BTC, valued at roughly $6.78 million, and 1,746 ETH, worth about $5.82 million.These figures are notably small, especially compared to Tether’s 92,000 BTC, worth approximately $7.64 billion,…
Unlock Seamless Security: Combining Physical and Digital Access with HYPR and IDEMIA Your organization spans a physical and a virtual environment, but how well aligned are your strategies for securing both? With the rise of hybrid work models, the challenge of securing sensitive information against increasingly sophisticated online and in-person threats has become more critical than ever. In a groundbreaking move to address these challenges, HYPR and IDEMIA have joined forces. This powerful partnership unifies the management of credentials for both physical and digital access control on a single smart badge (the ID-One PIV Card), enabling enterprises to enhance their…
Stephan Borosh // The year of 2021 has presented some interesting challenges to securing Windows and Active Directory environments with new flaws that Microsoft has been slow to address. In June, @Harmj0y and @tifkin_ released some excellent research and a whitepaper discussing some potential attack paths with Active Directory Certificate Services (“AD CS”) (https://posts.specterops.io/certified-pre-owned-d95910965cd2). This was followed by a modified version of impacket (https://github.com/SecureAuthCorp/impacket/pull/1101) which provides the ability to relay credentials to an AD CS server and obtain a certificate for the relayed user. This certificate may then be re-used elsewhere to authenticate or elevate privileges. The following diagram displays a potential attack scenario where a user is phished and the compromised host is used as a…
France’s antitrust authority fines Apple €150M for issues related to its App Tracking Transparency Pierluigi Paganini April 01, 2025 France fines Apple €150M for abusing its dominance in ATT consent practices on iOS and iPadOS from 2021 to 2023. France’s Autorité de la concurrence fined Apple €150M for abusing its dominance in App Tracking Transparency (ATT) consent practices on iOS and iPadOS between April 26, 2021 and July 25, 2023. Apple launched ATT with iOS 14.5, which requires apps to get user consent to access the Identifier for Advertisers (IDFA) for tracking and targeted ads. The Identifier for Advertisers (IDFA)…
The U.K. has published a policy statement on Cyber Security and Resilience Bill that sets out the policy measures to be included in the forthcoming Cyber Security and Resilience Bill, which will be introduced to Parliament later this year. The policy statement is also being laid before Parliament on Tuesday and will be introduced to Parliament in the current Parliamentary session. The bill will make crucial updates to the legacy regulatory framework by expanding the remit of the regulation to protect more digital services and supply chains; putting regulators on a strong footing to ensure essential cyber safety measures are…
In this Help Net Security interview, Aaron Weismann, CISO at Main Line Health, discusses the growing ransomware threat in healthcare and why the sector remains a prime target. He explains the difficulties of protecting patient information, securing legacy systems, and maintaining cybersecurity without disrupting care. Weismann also shares practical steps for improving incident response and strengthening defenses with limited resources. How have ransomware tactics evolved in the healthcare sector, and what makes healthcare such a prime target? I think there are various iterations of multiple ransoms and blackmail attempts. One is focusing directly on the healthcare delivery organizations (HDOs) as…