Author: HackWatchit

The ECCC Governing Board adopted its first Cybersecurity Work Programme under Digital Europe Programme (DEP) for 2025-2027. Priorities for investment range from new technologies for cybersecurity, including on AI and post-quantum transition, to actions for improving EU cyber resilience and supporting SMEs.  The adoption of the DEP WP 2025-2027 constitutes a fundamental instrument for the implementation and advancement of the mission of the ECCC. The Centre aims to pool investment in cybersecurity research, technology, and industrial development, and ensure the efficient implementation of projects and initiatives in coordination with the Network of National Coordination Centres (NCCs).   During 2025-2027, the ECCC…

In 2025, cyber threats will accelerate in complexity as organizations scramble to stay ahead of more sophisticated phishing attempts, advanced ransomware techniques and AI-driven threats like deepfakes. Public sector organizations and government systems remain a high-value target for both nation-state actors and criminal enterprises. A safe and resilient cyber culture begins internally. In fact, in a recent review of implementation efforts for the Executive Order on Improving the Nation’s Cybersecurity, the Government Accountability Office emphasized that federal agencies must create “a culture that prioritizes cybersecurity as an essential mission component.” Such a cultural approach, which includes people’s mindsets, behaviors and practices,…

This is the second part of “My learning to being hired again after a year… Part I”. , but it’s been a full year since I published the first part on TDS. And in that time, something beautiful happened. Every so often, someone would leave a comment, highlight a sentence, or send me a message. Most were simple notes like, “Thank you, Amy. Your post helped me.” But those words lit me up. They brightened entire days. They reminded me that I was never truly alone, not during those long months of unemployment, not in the struggle of figuring out…

We are delighted to announce that Cyberint, a Check Point company, was recently named a Leader and an Outperformer in the GigaOm Attack Surface Management Radar report. To read the full analysis, download the report here. In light of this major recognition, it’s worth taking a moment to reflect on the evolution of ASM—both the specific capabilities that Check Point provides to customers and on the trends of the broader Attack Surface Management market. Perhaps most importantly, we will also discuss what’s next for ASM and where the market is headed in 2025. The Origins of Attack Surface Management The…

The average cost of a data breach surged to $4.88 million from $4.45 million in 2023, a 10% surge and the biggest increase since the pandemic, as per a report by IBM (Cost of a Data Breach Report 2024). To counter the rising impact, 2 out of 3 organizations are massively investing in AI to prevent attacks and automate their SOCs. The organizations reported that they achieved an average savings of $2.2 million in breach costs by using AI in their preventative process. The ruinous financial and reputation impacts of a data breach The most significant impact of poor data security has…

Most people think of the internet as a globally connected resource. However, user experiences are not necessarily as consistent as they believe. Factors such as politics, regulations and censorship have made the internet a fragmented “splinternet” for some users. What are the potential implications for cybersecurity? Changes in Social Media Platforms’ Policies In the early days of the internet, people mostly went directly to website URLs and saw the same content regardless of where they lived. Eventually, companies began using technologies to determine site visitors’ locations and provide personalized content. Social media companies have taken that approach to greater heights,…

Al Roker never had a heart attack. He doesn’t have hypertension. But if you watched a recent deepfake video of him that spread across Facebook, you might think otherwise.  In a recent segment on NBC’s TODAY, Roker revealed that a fake AI-generated video was using his image and voice to promote a bogus hypertension cure—claiming, falsely, that he had suffered “a couple of heart attacks.”  “A friend of mine sent me a link and said, ‘Is this real?’” Roker told investigative correspondent Vicky Nguyen. “And I clicked on it, and all of a sudden, I see and hear myself talking…

Jordan and Kent have heard from a lot of people that the past Black Hills Information Security (BHIS) webcasts: “Group Policies That Kill Kill Chains” and “Active Directory Best Practices to Frustrate Attackers” have changed their business models for the better. And since they’ve been offered the BHIS soapbox again, they thought it was time to update this material and combine it. Security can sometimes move slow and other times blazingly fast. They’ll discuss what they’ve seen in the past year and how it impacts their view on baseline defensive configurations you shouldn’t be operating without. At the end of…

CISA has released indicators of compromise, detection signatures, and updated mitigation advice for rooting out a newly identified malware variant used by the attackers who breached Ivanti Connect Secure VPN appliances in December 2024 by exploiting the CVE-2025-0282 zero-day. The updated mitigation instructions stress the importance of conducting a factory reset of all devices – even those where threat hunting did not reveal evidence of compromise – as well as a factory reset of cloud and virtual systems using an external known clean image of the device. “CISA updated these mitigations based on identification of a new malware variant called…