Author: HackWatchit

History has taught us that trust must always be complemented by verification. It is replete with examples demonstrating the importance of pressures of greed over taking ethical practices even in dealings involving highly reputed and seemingly dependable parties. It is then incumbent upon chief operations officers (COO’s) to enable critical mechanisms that ensure accountability, transparency, and ethical compliance in the processes and regularly monitor and review them in terms of ensuring best practices. A summer 2023 incident involving the aviation sector which impacted both GE Aerospace and its partner, Safran, is a good example of why this is true. It turns out…

A newly discovered Android malware dubbed Crocodilus tricks users into providing the seed phrase for the cryptocurrency wallet using a warning to back up the key to avoid losing access. Although Crocodilus is a new banking malware, it features fully developed capabilities to take control of the device, harvest data, and remote control. Researchers at fraud prevention company ThreatFabric say that the malware is distributed via a proprietary dropper that bypasses Android 13 (and later) security protections. The dropper installs the malware without triggering Play Protect while also bypassing Accessibility Service restrictions. What makes Crocodilus special is that it integrates social engineering to make…

Are you concerned about your privacy when using your iPhone or iPad? Are you wondering if a standard VPN provides enough protection? If you’ve been exploring advanced security options, you may have heard about double VPN technology. Many iOS users are asking: Can I use a Double VPN on my iPhone or iPad? How secure is it compared to a regular VPN? Will it slow down my device too much? Which VPN services offer this feature for iOS? This comprehensive guide answers these questions and walks you through setting up Double VPN protection on your iOS devices. What is Double…

Table of Links Abstract and 1. Introduction 2 Methodology 3 Hardware 4 Software 5 Network 6 Consensus 7 Cryptocurrency Economics 8 Client API 9 Governance 10 Geography 11 Case Studies 12 Discussion and References A. Decentralization and PolicymakingB. Software Testing C. Brief Evaluations per Layer D. Measuring decentralization E. Fault Tolerance and Decentralization D Measuring decentralization Our work offers a framework for analyzing blockchain decentralization, but not specific metrics to quantitatively measure it. For example, a metric could assign a single number to reflect how close a system is to a single point of failure, given a distribution of resources…

DoD shepherds CMMC through Trump deregulatory initiative The Trump administration has a ’10 out, one in’ rule for new regulations, but DoD officials are confident they can finalize the CMMC requirements soon. Justin Doubleday@jdoubledayWFED March 25, 2025 7:12 pm 3 min read The Defense Department is still working to finalize the Cybersecurity Maturity Model Certification (CMMC) acquisition rule and clear a deregulatory push by the Trump administration. DoD released the draft CMMC acquisition rule last August. Officials had hoped to finalize the rule and begin including CMMC requirements in contracts by the middle of this year. But the Trump administration…

“We passed the audit. No idea how, but we passed.” If that sentence sounds familiar – or worse, relatable – it’s time for a serious look in the mirror. Every year, companies across industries breathe a collective sigh of relief when the auditors give the thumbs-up. The SOC 2, ISO 27001, PCI DSS – pick your acronym – get ticked off, and it’s back to business. But let’s be honest: how often does that success feel earned? More than a few security and compliance teams have walked out of an audit room with relief, not pride. Because deep down, they…

ORIGINALLY AIRED ON OCTOBER 25, 2021 Articles discussed in this episode: 01:42 – Story # 1: https://www.bleepingcomputer.com/news/security/fired-it-admin-revenge-hacks-school-by-wiping-data-changing-passwords/ 06:34 – Story # 2: https://krebsonsecurity.com/2021/10/missouri-governor-vows-to-prosecute-st-louis-post-dispatch-for-reporting-security-vulnerability/ 11:50 – Story # 3: https://www.pcgamer.com/hackers-drain-cryptocurrency-accounts-of-thousands-of-coinbase-users/ 23:47 – Story # 4: https://threatpost.com/vmware-esxi-encrypted-python-script-ransomware/175374/ 35:30 – Story # 5: https://thehackernews.com/2021/10/chinese-hackers-used-new-rootkit-to-spy.html 45:56 – Story # 6: https://cyberworkx.in/2021/10/08/a-new-uefi-bootkit-that-targets-windows-computers/ 51:45 – Story # 7: https://www.washingtonpost.com/national-security/rail-cybersecurity-dhs-regulations/2021/10/06/b3db07da-2620-11ec-8831-a31e7b3de188_story.html 54:14 – Story # 8: https://www.nbcnews.com/tech/security/ransomware-hits-us-candymaker-ahead-halloween-rcna3391 Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-What-You-Can Training Available live/virtual and on-demand

Discover the novel QWCrypt ransomware used by RedCurl in targeted hypervisor attacks. This article details their tactics, including DLL sideloading and LOTL abuse, and explores the group’s evolving cybercriminal activities. Bitdefender Labs has revealed a shift in the operational tactics of the long-standing cyber threat group known as RedCurl. This group, also known as Earth Kapre or Red Wolf, has historically maintained a low profile, relying heavily on covert data exfiltration. It has now been linked to a novel ransomware campaign, marking a dramatic change in their activities. This new ransomware strain, dubbed QWCrypt, targets hypervisors, effectively crippling infrastructure while…

As the digital transformation shapes the industrial cybersecurity sector, organizations must increasingly be prepared to adopt cyber risk quantification models to align cybersecurity investments with operational excellence. Titled ‘State of the Industrial Cybersecurity Market in 2025,’ the guide highlights market drivers and trends for 2025 and the outlook. It details the need to adopt best practices, foster cross-functional collaboration, and learn from past experiences to enable these organizations to build secure, resilient systems capable of meeting today’s threats and tomorrow’s uncertainties. Moreover, organizations face rising insurance costs while dealing with sophisticated cyber threats, further demanding a delicate balance between cyber…