Author: HackWatchit

Elon Musk, the outspoken CEO of Tesla, has recently found himself in the eye of a storm that goes beyond his usual business ventures. With his influence in various sectors, especially in Trump administration,  Musk’s actions have often sparked heated debates, but now, his influence seems to have taken a controversial turn. A hacker group, seemingly in retaliation for Musk’s actions, has launched a cyberattack targeting Tesla customers, resulting in a massive data breach that has left many owners of Tesla vehicles vulnerable. A website called “DOGEQUEST” surfaced online, displaying personal information of Tesla owners, including their names, addresses, and…

Veeam has patched a critical remote code execution vulnerability tracked as CVE-2025-23120 in its Backup & Replication software that impacts domain-joined installations. The flaw was disclosed yesterday and affects Veeam Backup & Replication version 12.3.0.310 and all earlier version 12 builds. The company fixed it in version 12.3.1 (build 12.3.1.1139), which was released yesterday. According to a technical writeup by watchTowr Labs, who discovered the bug, CVE-2025-23120 is a deserialization vulnerability in the Veeam.Backup.EsxManager.xmlFrameworkDs and Veeam.Backup.Core.BackupSummary .NET classes. A deserialization flaw is when an application improperly processes serialized data, allowing attackers to inject malicious objects, or gadgets, that can execute harmful code. Last year, while…

What is the BlackLock ransomware?BlackLock is a relatively new ransomware group. First seen in March 2024, the ransomware operation initially operated under the name El Dorado, before rebranding as BlackLock late last year. BlackLock follows a RaaS (ransomware-as-a-service) business model, leasing its tools and infrastructure to affiliates who launch attacks, sharing a proportion of the proceeds with BlackLock.And I guess they do the normal thing of encrypting your data and demanding a ransom?Yes, like many other ransomware groups, BlackLock both encrypts victims’ files and exfiltrates data – issuing threats to publish it if ransoms are not paid. BlackLock uses custom-built ransomware…

ORIGINALLY AIRED ON JULY 25, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-07-25 03:59 – Story # 1: DOJ seized ransoms paid by health centers in Kansas, Colorado after 2021 attacks – https://therecord.media/doj-seized-ransoms-paid-by-health-centers-in-kansas-colorado-after-2021-attacks/ 08:38 – Story # 1b: twitter.com/cryptowhale – https://twitter.com/cryptowhale 17:34 – Story # 2: How Conti ransomware hacked and encrypted the Costa Rican government – https://www.bleepingcomputer.com/news/security/how-conti-ransomware-hacked-and-encrypted-the-costa-rican-government/ 22:29 – Story # 3: Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users – https://thehackernews.com/2022/07/experts-uncover-new-cloudmensis-spyware.html 36:49 – Story # 4: Google Play hides app permissions in favor of developer-written descriptions – https://arstechnica.com/gadgets/2022/07/google-plays-new-privacy-section-actually-hides-app-permissions/ 39:09 –…

This content was written by Donald Polaski, Marissa Beall and Christopher Castelli. Speed Read To address urgent national security challenges around the world, intelligence community (IC) analysts and warfighters need to make sense of complex, uncertain situations—and to do that, they need next-generation sensemaking systems that can collect and analyze data on an exponentially increasing scale. These tools can quickly synthesize data, present options to analysts, and operate as assistants. Imagine, for instance, new algorithms designed to strengthen collection, more powerful sensors with greater analytic power at the edge, computer vision models for capturing new objects or performing change detection…

Cybersecurity researchers at the Citizen Lab at the University of Toronto have exposed the use of sophisticated spyware named Graphite, developed by the Israeli firm Paragon Solutions, to target high-profile individuals through WhatsApp. Their investigation reveals that a previously unknown zero-day vulnerability in WhatsApp’s software allowed the spyware to be installed on devices through a zero-click exploit, allowing adversaries to gain unauthorized access to targeted phones. For your information zero-click exploits mean that a device can be compromised without the user clicking a link, opening a file, or performing any other action. Attack flow explained (Source: The Citizen Lab) Graphite…

Pennsylvania State Education Association data breach impacts 500,000 individuals Pierluigi Paganini March 20, 2025 A data breach at the Pennsylvania State Education Association exposed the personal information of over 500,000 individuals. The Pennsylvania State Education Association (PSEA) suffered a data breach that impacted 517,487 individuals. PSEA is a labor union representing teachers, education support professionals, and other school employees in Pennsylvania. It advocates for public education, negotiates contracts, and provides professional development for its members. PSEA is affiliated with the National Education Association (NEA). The incident occurred around July 6, 2024, and exposed people’s personal information. An investigation completed on…

AI Security Architect Verizon | USA | Hybrid – View job details As an AI Security Architect, you will ensure security architecture reviews are integrated into Verizon’s AI development lifecycle. This includes embedding robust security measures from design to deployment, conducting risk assessments on AI models, and implementing security tools and protocols in AI/ML operations. Application Penetration Tester – Cyber Security Supervisor RSM US LLP | USA | Hybrid – View job details As an Application Penetration Tester – Cyber Security Supervisor, you will supervise and lead security assessments, including static and dynamic application security testing. Conduct manual penetration testing…

All of this means that if we want to minimize surprise FPs between model releases, we must ensure DV ordering preservation.   XGBoost is flexible because its Newton-Raphson solver requires only the gradient and Hessian of the objective rather than the objective itself. By adding small perturbations to the gradient and to the Hessian, we can replace the standard XGBoost objective function with one that includes a loss for failing to rank DVs according to the DV ranking defined by the previous model release, thereby promoting model release stability.   Mathematical Description of XGBoost Optimization  The following, up to but not including…