Author: HackWatchit

The rapid advancement of digital technologies has transformed the healthcare industry, improving patient care, operational efficiency, and medical research. However, this digital shift has also escalated cybersecurity threats, making healthcare organizations prime targets for cyberattacks. Disruptions in healthcare services can have severe, even life-threatening, consequences, elevating cybersecurity from an IT concern to a critical patient safety issue. Cybercriminals exploit healthcare institutions due to the high value of patient data, reliance on outdated systems, staff vulnerabilities, and the potentially devastating impact of successful attacks. Within EC-Council’s latest whitepaper, “Securing Healthcare: Overcoming Cyber Threats in a Digital Era,” authored by Muath AlHomoud,…

Adversaries don’t need to force their way in when they can slip through an organization’s overlooked assets. Subdomain takeovers are a prime example of how attackers exploit misconfigured or abandoned DNS records to gain access, launch phishing campaigns, distribute malware, or take other malicious actions — all while operating under the guise of a legitimate corporate domain.  With these well-established tactics, techniques, and procedures, adversaries can infiltrate an environment without triggering immediate suspicion. Here, we explain how a subdomain takeover attack works and the steps organizations should take to defend against them. Identifying and Tracking Vulnerable Subdomains A subdomain takeover…

In 2015, the Wall Street Journal (WSJ) published a highly effective series of heatmaps illustrating the impact of vaccines on infectious diseases in the United States. These visualizations showcased the power of blanket policies to drive widespread change. You can view the heatmaps here. Heatmaps are a versatile tool for data analysis. Their ability to facilitate comparative analysis, highlight temporal trends, and enable pattern recognition makes them invaluable for communicating complex information.  In this Quick Success Data Science project, we’ll use Python’s Matplotlib graphing library to recreate the WSJ’s measles chart, demonstrating how to leverage heatmaps and carefully designed colorbars…

15 Dec 2022 Informational, InfoSec 101, News, Podcasts 00:00 – PreShow Banter™ — Scissors Vs Paper00:15 – BHIS – Talkin’ Bout [infosec] News 2022-12-1202:12 – Story # 1: Rackspace confirms ransomware attack behind days-long email meltdownhttps://www.theregister.com/2022/12/06/rackspace_confirms_ransomware/07:56 – Story # 1b: Rackspace Hit With Lawsuits Over Ransomware Attackhttps://www.securityweek.com/rackspace-hit-lawsuits-over-ransomware-attack09:13 – Story # 2: Uber suffers new data breach after attack on vendor, info leaked onlinehttps://www.bleepingcomputer.com/news/security/uber-suffers-new-data-breach-after-attack-on-vendor-info-leaked-online/13:18 – Story # 3: Apple Plans New Encryption System to Ward Off Hackers and Protect iCloud Datahttps://www.wsj.com/articles/apple-plans-new-encryption-system-to-ward-off-hackers-and-protect-icloud-data-1167043563514:20 – Story # 3b: Apple Newsroom: Apple advances user security with powerful new data protectionshttps://www.apple.com/newsroom/2022/12/apple-advances-user-security-with-powerful-new-data-protections/16:46 – Story # 3c: FBI…

Industrial cybersecurity company Dragos released a case study detailing how the Littleton Electric Light and Water Departments (LELWD) detected a sophisticated cyber adversary within their network and had to respond swiftly. The case study offers insights into how LELWD identified and eliminated a persistent threat, providing a detailed look at their real-world response to the VOLTZITE cyberattack. It highlights the OT (operational technology) security challenges faced by small utilities and demonstrates how LELWD addressed visibility gaps, vulnerability management issues, and IT-OT security risks.  Furthermore, it emphasizes that cybersecurity extends beyond mere products, showcasing how LELWD transformed a crisis into an…

CISA says the Medusa ransomware operation has impacted over 300 organizations in critical infrastructure sectors in the United States until last month. This was revealed in a joint advisory issued today in coordination with the Federal Bureau of Investigation (FBI) and the Multi-State Information Sharing and Analysis Center (MS-ISAC). “As of February 2025, Medusa developers and affiliates have impacted over 300 victims from a variety of critical infrastructure sectors with affected industries including medical, education, legal, insurance, technology, and manufacturing,” CISA, the FBI, and MS-ISAC warned on Wednesday. “FBI, CISA, and MS-ISAC encourage organizations to implement the recommendations in the…

As organizations reassess their data security strategies at year end, many are considering moving from cloud services to on-prem solutions to gain greater control over their data and mitigate the risks associated with cloud vulnerabilities. Following many high-profile breaches in 2024 and the theft of customer data from multi-cloud data warehousing platforms, malicious attackers continue to exploit weaknesses in cloud infrastructure. The widespread breaches and resulting data exposures have sparked concern in many industries, particularly for organizations that deliver the critical infrastructure the nation relies on. To mitigate the risk of exposure through cloud service attacks, organizations will reconsider their…

Creating a cybersecurity standard of care: The future of software liability This approach emphasizes the importance of integrating security measures into the software development lifecycle from the beginning. Joel Krooswyk March 12, 2025 4:47 pm 3 min read Over the past year, the federal government has taken significant steps toward promoting a “secure by design” approach to cybersecurity. This approach emphasizes the importance of integrating security measures into the software development lifecycle from the beginning. Government leaders are actively exploring regulatory frameworks designed to hold organizations accountable for security breaches and enforce compliance with established security standards. These frameworks would…

The adoption of connected medical devices, collectively called the Internet of Medical Things (IoMT), has transformed patient care. However, this technological advancement has also introduced cybersecurity challenges to safeguard patient safety and uphold organizational security. Securing IoMT: Prioritizing risks IoMT devices, ranging from infusion pumps to imaging systems, are often interconnected and communicate over networks, making them potential entry points for cyber threats. The unique nature of medical devices, often running on legacy systems with extended lifecycles, compounds the complexity of securing them. “Healthcare organizations are constantly battling to manage devices with high CVSS scores of 9.0 and above. We…