Author: HackWatchit

ESET researchers have published an in-depth analysis highlighting significant shifts within the ransomware landscape, spotlighting the rise of RansomHub. This relatively new ransomware-as-a-service operation has quickly come to dominate the scene. “The fight against ransomware reached two milestones in 2024: LockBit and BlackCat, formerly the top two gangs, dropped out of the picture. And for the first time since 2022, recorded ransomware payments dropped significantly by a stunning 35%. On the other hand, the recorded number of victims announced (to be outed publicly) on dedicated leak sites increased by roughly 15%. A big part of this increase is due to…

BlackLock Ransomware Targeted by Cybersecurity Firm Pierluigi Paganini March 26, 2025 Resecurity found an LFI flaw in the leak site of BlackLock ransomware, exposing clearnet IPs and server details. Resecurity has identified a Local File Include (LFI) vulnerability in Data Leak Site (DLS) of BlackLock Ransomware.  Cybersecurity experts were able to exploit misconfiguration in vulnerable web-app used by ransomware operators to publish victims’ data – leading to clearnet IP addresses disclosure related to their network infrastructure behind TOR hidden services (hosting them) and additional service information acquired from server-side.   The collected information allowed to assist with further investigation and…

ORIGINALLY AIRED ON JANUARY 31, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Legions of the Undead 01:26 – BHIS – Talkin’ Bout [infosec] News 2022-01-31 04:06 – Story # 1: Hacktivists say they hacked Belarus rail system to stop Russian military buildup – https://arstechnica.com/information-technology/2022/01/hactivists-say-they-hacked-belarus-rail-system-to-stop-russian-military-buildup/ 08:46 – Story # 2: Ukrainian government calls out false flag operation in recent data wiping attack – https://therecord.media/ukrainian-government-calls-out-false-flag-operation-in-recent-data-wiping-attack/ 11:18 – Story # 3: Ukrainian cyber defense in need of upgrades as tensions rise – https://therecord.media/ukrainian-cyberdefense-in-need-of-upgrades-as-tensions-rise/ 17:32 – Story # 4: DoD weapons testers to assess cybersecurity of GPS satellites, ground system,…

Tel Aviv, Israel, March 25th, 2025, CyberNewsWire ARMO CADR minimizes the cloud attack surface, detects and responds to unknown and known cyberattacks while ensuring business continuity, combining the power of CDR and ADR solutions ARMO, the leading Cloud Runtime Security company and the creator of Kubescape, announced today the launch of its Behavioral Cloud Application Detection and Response (CADR) solution. ARMO CADR provides a full explainable and traceable runtime security story spanning the entire cloud stack and responds to threats without flooding teams with alerts. The transition to cloud-native applications has introduced new cybersecurity challenges. Traditional application architectures have been…

An open integration approach for extended detection and response (XDR) empowers organizations to harness the full potential of their security ecosystems. This open approach provides security analysts with the agility to leverage the best tools and access the best information to protect their particular environments. This not only increases team efficiency but also the speed at which they can react to potential threats and reduces dwell time. Cisco XDR stands out in this arena by offering unmatched integration capabilities with not only Cisco solutions but a broad array of third-party tools. This is not a one-and-done endeavor — it requires…

In today’s ever-evolving cybersecurity landscape, staying ahead of potential threats is a constant challenge. Advanced persistent threats, ransomware, and wipers are just a few risks organizations must guard against. However, quantum computing is one of the most complex and far-reaching challenges on the horizon. Thanks to their ability to perform complex calculations exponentially faster than classical computers, quantum computers promise to revolutionize many scientific fields, such as chemistry, physics, and materials science. However, they also pose a significant risk in the wrong hands—potentially breaking today’s encryption methods and exposing sensitive data to malicious actors. The Threat to Traditional Encryption Current…

Crypto-based prediction marketplace Polymarket apologized on its Discord server for what it described as an “unprecedented situation,” after users flagged apparent manipulation of market results by UMA whales.UMA is Polymarket’s oracle system whereby the results of betting markets are determined by recourse to external sources of data, and by staking UMA tokens behind a particular resolution. For example, if there were a market that allowed users to predict whether the sun would rise tomorrow, UMA holders would be rewarded for backing “yes” and risk losing their tokens if they chose “no.”But now, in apparent response to allegations of manipulation, Polymarket…

Threat actors are using a tool available on the dark web to automate credential-stuffing attacks, allowing them to rapidly scale their malicious efforts by testing millions of stolen credentials in rapid succession.The e-crime tool, Atlantis AIO, is the latest example of how automation technologies, including AI and machine learning, are giving cybercriminals significantly greater capabilities to more easily run their attacks at scale.“By offering pre-configured modules for targeting a range of platforms and cloud-based services – particularly email providers – it allows cybercriminals to launch credential stuffing attacks at scale with minimal effort,” threat researchers with Abnormal Security wrote in…

A decade after acquiring Family Dollar for more than $8 billion, Dollar Tree is selling the chain. A pair of private equity groups will acquire Family Dollar for $1 billion, according to a Wednesday (March 26) press release. The deal comes 16 months after Dollar Tree said it was evaluating the future of Family Dollar amid a decline in consumer spending. Under the deal, which is expected to close in the second quarter of this year, Brigade Capital Management and Macellum Capital Management will team up to take Family Dollar private, per the release. “This is a major milestone in…