Author: HackWatchit

What do you do after amassing a fortune from cryptocurrency? Build a space station, of course.That’s exactly what Ripple co-founder Jed McCaleb is doing, according to a report by Bloomberg.While crypto investors say they’re “going to the moon” when Bitcoin surges, McCaleb, a longtime industry pioneer, is aiming for the real thing.“It’s super important that people take this leap from where we are today to this potential world where there’s a lot of people living off the Earth,” McCaleb told Bloomberg. “There’s not that many folks that are willing to dedicate the amount of resources and time and risk tolerance…

With cyber attacks and threats continuing to escalate in tandem with geopolitical tensions, consequence-based cyber risk management has emerged as a vital mechanism for protecting critical infrastructure installations. In contrast with the risk management strategies that traditionally deal with probabilities of threats, this model prioritizes the possible consequences of cyber events to industrial control systems (ICS) and operational technology (OT) environments. Sectors like energy, manufacturing, and utilities are especially dependent on this transition since the effects of a cyberattack could be drastically severe, ranging from downtime of the operations to safety risks and environmental damage. These critical infrastructures are now…

Are Centralized Management Solutions the Key to Mastering Non-Human Identities Within IAM? For enterprises operating, managing Non-Human Identities (NHIs) within Identity and Access Management (IAM) remains a critical requirement. But how can organizations keep pace with the sheer volume of machine identities and their associated secrets? The answer lies in centralized management for NHIs within IAM. The Core of Centralized NHI Management Centralized NHI management within IAM allows organizations to cover all lifecycle stages of machine identities seamlessly. Through this proactive approach, enterprises can discover, classify, and respond to potential threats more effectively. With a focus on automating NHI and…

The U.S. Department of Treasury announced today that it has removed sanctions against Tornado Cash, a cryptocurrency mixer used by North Korean Lazarus hackers to launder hundreds of millions stolen in multiple crypto heists. The Department’s Office of Foreign Assets Control (OFAC) sanctioned Tornado Cash in August 2022 for helping launder over $7 billion since its creation in 2019. However, a Monday court filing linked in today’s press release shows that a Fifth Circuit U.S. federal appeals court ruled on November 26, 2024, that OFAC “overstepped its congressionally defined authority” when it sanctioned the crypto mixer. As OFAC said when it added Tornado Cash to its…

Jordan Drysdale // Overview The following description of some of Impacket’s tools and techniques is a tribute to the authors, SecureAuthCorp, and the open-source effort to maintain and extend the code. https://github.com/SecureAuthCorp/impacket Lab Setup ARM template here: doazlab.com or github.com/DefensiveOrigins/DO-LAB Authenticate to an Azure subscription where you can construct resources. Deploy lab. Domain controller and joined workstation Ubuntu ntlmrelayx.py The attack scenario below emulates Mitre ATT&CK 1204: Malicious Link. https://attack.mitre.org/techniques/T1204/001/ The attacker leaves an LNK file on a network file share to trigger silent authentication to a malicious target. All unprotected visitors to the file share submit credentials without user…

Cybercriminals are always looking for new ways to take advantage of people. One effective method they use is exploiting notification channels. They manipulate these channels to deliver fake alerts and messages, tricking you into revealing personal information or clicking on harmful links. You might receive a notification that seems real but is actually bait. For instance, emails or texts that appear to be from trusted services can lead you to phishing sites. Understanding how these tactics work can help you stay safer online. By knowing the signs of a fraudulent notification, you can protect yourself. This blog will explain the…

Strategic Steps to Improve Women’s Representation and Inclusion Cybersecurity teams rely heavily on innovation but often miss an essential ingredient for resilience: diversity of thought. The persistent underrepresentation of women—who constitute only 22% of the cybersecurity workforce according to ISC²—limits organizations in ways often unnoticed yet deeply consequential. Rather than viewing inclusion as simply beneficial, organizations must now recognize it as indispensable. Elevating women’s presence from a mere statistic to a strategic imperative offers cybersecurity leaders a tangible path toward building genuinely robust, insightful, and future-ready teams. Why Inclusion Strengthens Cybersecurity Organizations with inclusive practices consistently achieve better outcomes in…

You’ve probably used the normal distribution one or two times too many. We all have — It’s a true workhorse. But sometimes, we run into problems. For instance, when predicting or forecasting values, simulating data given a particular data-generating process, or when we try to visualise model output and explain them intuitively to non-technical stakeholders. Suddenly, things don’t make much sense: can a user really have made -8 clicks on the banner? Or even 4.3 clicks? Both are examples of how count data doesn’t behave. I’ve found that better encapsulating the data generating process into my modelling has been key…

In a perfect world, we could ignore AI altogether, but it’s not that simple. Whether your job involves AI, you’re worried about your content being used for training, or you’re concerned about your kids using AI inappropriately, learning how to stay safe while using AI is crucial. Not to mention, AI-driven scams have caused $108 million in damages in the US alone, with incidents doubling from July 2023 to July 2024, according to the FTC. Scammers use increasingly complex AI tactics (e.g., deepfakes and voice cloning) to impersonate and trick people into handing over sensitive data, so it pays to…