Author: HackWatchit

Corero Network Security announced the strategic advancement of AI capabilities across its product portfolio and operations—building on a long-standing legacy of intelligent, adaptive security solutions. For years, Corero’s SmartWall ONE platform has delivered automated, real-time DDoS protection powered by advanced detection and adaptive response mechanisms. While others are now racing to add “AI” labels to their offerings, Corero has quietly focused on delivering tangible outcomes—speed, precision, and resilience—without relying on industry buzzwords. “As AI technologies mature, they offer powerful opportunities to enhance network defense,” said Carl Herberger, CEO of Corero Network Security. “But we’ve always built intelligence into our solutions.…

The Medusa ransomware gang continues to present a major threat to the critical infrastructure sector, according to a newly-released joint advisory from the FBI, Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing and Analysis Center (MS-ISAC).As of February 2025, the Medusa ransomware operation, which we have previously detailed on the Tripwire State of Security blog, had hit over 300 organisations from a variety of critical infrastructure sectors with affected industries including education, health, legal, insurance, technology, and manufacturing.Once hit by a Medusa ransomware attack, victims are told that they must pay a ransom to decrypt their files…

The UK’s National Health Service (NHS) has transformed its approach to validating its level of cybersecurity maturity across healthcare by adopting the National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF).  This shift is key to achieving the NHS’s broader goals: protecting patient data, ensuring uninterrupted healthcare delivery, and building the foundation for a fully digitized healthcare system by 2030. By prioritizing outcome-driven security over traditional compliance, the NHS is embedding cybersecurity into its operations, aligning with the UK’s broader cybersecurity strategy and standardizing risk management to prepare for future challenges. By 2030, the NHS aims to be fully digitized…

FBI and CISA warn of Medusa ransomware attacks impacting critical infrastructure. Learn about Medusa’s tactics, prevention tips, and why paying ransoms is discouraged.  A joint advisory by the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) has revealed a particularly aggressive digital threat- a criminal operation, known as the Medusa ransomware gang. According to the advisory (#StopRansomware: Medusa Ransomware), Medusa, a ransomware-as-a-service (RaaS) group first identified in June 2021, has become a serious threat to critical infrastructure sectors in the United States. Authorities have identified a pattern of attacks affecting organizations across diverse sectors, including…

The U.S. Federal Communications Commission (FCC) is conducting its first comprehensive review of submarine cable rules since 2001 to enhance the protection of the nation’s submarine cable infrastructure amid evolving national security concerns. The review also proposes that all applicants for cable landing licenses and licensees submitting periodic reports must certify that they have developed and implemented cybersecurity risk management plans. Existing licensees must also provide this certification for the first time, following a prioritization schedule.  Additionally, applicants and licensees must confirm they take reasonable measures to protect the confidentiality, integrity, and availability of their systems. The cybersecurity plans should…

16 Nov 2022 Informational, InfoSec 101, News, Podcasts 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-11-1402:26 – Story # 1: Hackers Dump Australian Health Records Online After Insurer Refuses to Pay Ransom– https://gizmodo.com/hackers-health-info-online-medibank-pay-onion-dark-web-184976074210:04 – Story # 2: TransUnion LLC Confirms Recent Data Breach with State Attorney General’s Office– https://www.jdsupra.com/legalnews/transunion-llc-confirms-recent-data-6828319/18:08 – Story # 3: Russian LockBit ransomware operator arrested in Canada– https://www.bleepingcomputer.com/news/security/russian-lockbit-ransomware-operator-arrested-in-canada/22:58 – Story # 4: The downfall of FTX’s Sam Bankman-Fried sends shockwaves through the crypto world– https://www.npr.org/2022/11/14/1136482889/ftx-sam-bankman-fried-shockwaves-crypto32:10 – Story # 4b: Coinsec Podcast.– https://coinsecpodcast.com40:23 – Story # 5: Install Latest Windows Update ASAP! Patches Issued for 6 Actively Exploited Zero-Days– https://thehackernews.com/2022/11/install-latest-windows-update-asap.html42:12 – Story #…

Is AP automation solution provider AvidXchange for sale?  Bloomberg reports that the firm, specializing in bill payment and receipt solutions for midsize businesses, is exploring a potential sale after receiving takeover interest from several suitors, according to sources familiar with the matter. The Charlotte, North Carolina-based company has enlisted the services of Financial Technology Partners to consider its options following recent approaches by potential buyers, including private equity firms. However, no final decision has been made, and AvidXchange might choose not to proceed with a sale, particularly given the current volatility in equity markets. The ongoing discussions come as AvidXchange’s…

Staying on top of a fast-growing research field is never easy. I face this challenge firsthand as a practitioner in Physics-Informed Neural Networks (PINNs). New papers, be they algorithmic advancements or cutting-edge applications, are published at an accelerating pace by both academia and industry. While it is exciting to see this rapid development, it inevitably raises a pressing question: How can one stay informed without spending countless hours sifting through papers? This is where I have found review papers to be exceptionally valuable. Good review papers are effective tools that distill essential insights and highlight important trends. They are big-time…

GitLab addressed critical auth bypass flaws in CE and EE Pierluigi Paganini March 13, 2025 GitLab addressed two critical authentication bypass vulnerabilities in Community Edition (CE) and Enterprise Edition (EE). GitLab released security updates to address critical vulnerabilities in Community Edition (CE) and Enterprise Edition (EE). The company addressed nine vulnerabilities, including the two critical ruby-saml authentication bypass issues respectively tracked as CVE-2025-25291 and CVE-2025-25292. GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2 addressed the issue. GitLab.com is already patched. “GitLab has remediated two privately disclosed security issues (CVE-2025-25291, CVE-2025-25292) identified in the ruby-saml library which GitLab uses when SAML SSO…