Author: HackWatchit

RMC Global, a provider of risk management and industrial cybersecurity solutions for critical infrastructure and critical missions, announced on Tuesday its acquisition of Shearer and Associates, an engineering and cybersecurity firm specializing in Department of Defense (DoD) and critical infrastructure projects. “This acquisition is an exciting step forward in RMC’s mission to protect and enhance critical assets for our clients,” said Vince Kuchar, CEO of RMC. “Shearer and Associates brings deep expertise in facility and security engineering and Industrial Control System (ICS) cybersecurity – capabilities that will further strengthen our ability to deliver comprehensive risk management and security solutions. Together,…

Why build things the hard way when you can design them the smart way? As a Supply Chain Data Scientist, I’ve explored various frameworks like LangChain and LangGraph to build AI agents using Python. Leveraging LLMs with LangChain for Supply Chain Analytics — A Control Tower Powered by GPT — (Image by Samir Saci) The illustration above is from an article I wrote at the end of 2023, titled “Leveraging LLMs with LangChain for Supply Chain Analytics — A Control Tower Powered by GPT.” At the time, I was exploring how to use LangChain to build an agent acting as a Supply Chain Control Tower. A year…

Cybersecurity threats are evolving at an unprecedented pace, leaving organizations vulnerable to large-scale attacks. Security breaches and data leaks can have severe financial and reputational consequences. To tackle these risks, businesses must adopt a proactive approach to security that doesn’t just react to threats but actively anticipates and mitigates them.  This is where pentesting services come into play. Unlike automated vulnerability scans, penetration testing involves simulating real-world attacks to uncover security gaps before malicious actors can exploit them. Organizations across industries rely on pentesting to strengthen their defenses, meet compliance requirements, and validate security controls against evolving threats. This article…

Attackers are already using AI, but you can return fire by deploying your own AI-powered cyber security tools. Turning to general use LLMs like ChatGPT or DeepSeek is not an option for security management as they are not specialized for network security and risk exposing sensitive data. But enterprise-grade, purpose built GenAI assistants and AI agents have the potential to provide all the benefits of GenAI to help you stay ahead of AI-powered attacks, without exposing your organization to the inherent risks of using general purpose GenAI tools. The benefits of GenAI assistants include streamlining operations, saving time and costs,…

ORIGINALLY AIRED ON JANUARY 24, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — The Monkey Dance 00:25 – BHIS – Talkin’ Bout [infosec] News 2022-01-24 01:49 – Story # 1: New Log4j attacks target SolarWinds, ZyXEL devices – https://therecord.media/new-log4j-attacks-target-solarwinds-zyxel-devices/ 08:18 – Story # 2: New MoonBounce UEFI bootkit can’t be removed by replacing the hard drive – https://therecord.media/new-moonbounce-uefi-bootkit-cant-be-removed-by-replacing-the-hard-drive/ 13:18 – Story # 3: Crypto.com finally confirms major hack, says it lost $34 million – https://therecord.media/crypto-com-finally-confirms-major-hack-says-it-lost-34-million/ 15:53 – Story # 3b: Coinbase Hack – https://www.bleepingcomputer.com/news/security/hackers-rob-thousands-of-coinbase-customers-using-mfa-flaw/ 21:47 – Story # 4: Hackers From North Korea Stole Millions Of Dollars…

Now more than ever, the cloud security program known as FedRAMP needs industry’s help. That was the message Monday from Pete Waterman, the director of the Federal Risk Authorization Management Program at the General Services Administration. “We’re going to transform FedRAMP: Instead of the government deciding what is best, we’ll collaborate with industry to drive the solution. We’ll start now and update our approach continuously. We’ve all been talking about automating the status quo for way too long. Everyone in this room knows that if it was that easy, we would have done it by now,” Waterman said at an…

Cloud-based streaming company StreamElements confirms it suffered a data breach at a third-party service provider after a threat actor leaked samples of stolen data on a hacking forum. The platform has reassured users that the attack didn’t impact its servers, though older data at a third-party provider they stopped working with last year was still exposed. “We recently became aware of a data security incident involving a third-party service provider we stopped working with last year,” the company tweeted on X. “We can confirm no StreamElements servers have been breached.” “While this incident did not originate within StreamElements systems, we…

Do you rely on SAP maintenance contracts to keep vulnerabilities in check? Here’s a question: have you felt the sting of renewal season? Those spiraling costs are hard to ignore—just like the rising threats and security compliance headaches. No wonder so many organizations, maybe even yours, are asking: Do we really need to keep paying for vendor protection, or could we handle SAP security ourselves? Yes, ditching the maintenance contract can save cash, but it’s about something far more fundamental: reclaiming control, building in-house expertise, and fostering a proactive security mindset. Self-sufficiency in SAP security isn’t without its challenges, but…

Artificial intelligence has emerged as a game-changing force, with record amounts of funding fueling new innovations that are transforming industries and workflows at speeds we have never seen before. According to data from Crunchbase, in February 2024, AI companies received $4.7 billion in venture funding. That’s more than double the $2.1 billion invested in February 2023. It’s money like this is fueling innovations that are being adopted at record speeds. Take code copilots as an example. It saw adoption rates exceeding 50%. Other big releases in 2024 included OpenAI’s GPT-4o and o1 Series and AI Video Creation Tools such as Google’s…