Author: HackWatchit
SOC teams across businesses, industries, and geographies share the same goal: Stop cyberattacks before damage is done. But for those with legacy SIEMs, this goal is nearly impossible to achieve. While powerful, legacy SIEMs demand an overwhelming investment of time, resources, and expertise to set up and maintain. Legacy SIEMs force SOC teams to manually define every possible attack scenario and ingest massive amounts of data to detect threats, driving both complexity and costs. Next, they must build thousands of rules to cover every attack scenario, from malware to insider threats, across every stage of the kill chain. Although most…
Enterprises spend billions of dollars annually on cybersecurity products to keep them from getting hacked. And yet, the hacks keep coming – and they’re getting worse. Why? A new report out from ReversingLabs* a malware analysis and software supply chain security firm, has an answer: because the open source and commercial software and services those enterprises run on are full of security issues that make them easy prey for malicious actors. ReversingLabs’ 2025 Software Supply Chain Security Report, released on Wednesday, finds that security flaws in commercial and open source supply chains are epidemic, as malicious actors pivot to target…
3 Jan 2023 Informational, InfoSec 101, News, Podcasts 00:00 – PreShow Banter™ — Seven People00:51 – BHIS – Talkin’ Bout [infosec] News 2023-01-0201:37 – Story # 1: LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolenhttps://www.theverge.com/2022/12/28/23529547/lastpass-vault-breach-disclosure-encryption-cybersecurity-rebuttal32:22 – Story # 2: Southwest Airlines’ post-Christmas meltdown thanks to ‘outdated IT’ systems, poor schedulinghttps://www.nytimes.com/2022/12/31/opinion/southwest-airlines-computers.html42:18 – Story # 3: McGraw Hill’s S3 buckets exposed 100,000 students’ gradeshttps://www.theregister.com/2022/12/20/mcgraw_hills_s3_buckets_exposed/47:59 – Story # 4: Okta confirms another breach after hackers steal source codehttps://techcrunch.com/2022/12/22/okta-breach-source-code-github/ We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain: Infosec articles Challenging puzzles Comic book based on real-life hacking adventures Coloring…
Key Findings The hospitality and recreation sector—encompassing industries such as arts, entertainment, and gambling—has increasingly drawn the attention of cybercriminals. Between September 1, 2024, and February 28, 2025, threat actors ramped up efforts to exploit this sector through spearphishing, impersonation campaigns, ransomware, and vulnerabilities in external remote services. These financially motivated attacks not only target sensitive customer data and operational systems but also threaten the sector’s reputation and business continuity. Let’s dive into the key findings from this period and explore how organizations in this sector can strengthen their defenses against rising cyber threats. External Remote Service Exploits Grew by…
Outage outrage was a Ukrainian cyberattack, implies our favorite African billionaire comedy villain.The social media platform formerly known as Twitter went offline earlier this week. It was swamped by wave after wave of distributed denial of service attacks (DDoS). Now-owner Elon Musk (pictured) has been telling everyone the DDoS traffic came from Ukraine.O RLY? That’s “garbage,” say experts. In today’s SB Blogwatch, we never stopped calling it Twitter.Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: The baked bean song.X Marks the BotnetWhat’s the craic? Ramishah Maruf, Clare Duffy, Hadas Gold and Sean Lyngaas report: X hit by waves…
The amount of Bitcoin (BTC) held by public corporations reached 592,112 BTC in 2024, according to Bitcoin Treasuries data.Bitwise head of research Ryan Rasmussen highlighted that the number is twice as much Bitcoin as institutions accumulated in the previous five years combined.History of accumulationOn Jan. 1, 2024, the amount of Bitcoin held by publicly listed companies was 272,777 BTC.Two significant accumulation leaps were registered in 2020 and 2021. During the first year of the COVID pandemic, institutions inched close to a 100,000 BTC stash. This increased significantly the following year, as the corporate-held amount surpassed 200,000 BTC.However, the momentum was temporarily…
Sonatype researchers uncover critical vulnerabilities in picklescan. Learn how these flaws impact AI model security, Hugging Face, and best practices for developers. Cybersecurity researchers at Sonatype have identified several vulnerabilities within picklescan, a tool used for examining Python pickle files for malicious code. These files, commonly used for storing and retrieving machine learning models, pose a security risk due to their ability to execute arbitrary code during the process of retrieving the stored data. According to Sonatype’s analysis, shared with Hackread.com, in total four vulnerabilities were found: CVE-2025-1716– allows attackers to bypass the tool’s checks and execute harmful code; CVE-2025-1889–…
Last year, NIST standardized a set of encryption algorithms that can keep data secure from a cyberattack by a future quantum computer. Now, NIST has selected a backup algorithm that can provide a second line of defense for the task of general encryption, which safeguards internet traffic and stored data alike. Encryption protects sensitive electronic information, including internet traffic and medical and financial records, as well as corporate and national security secrets. But a sufficiently powerful quantum computer, if one is ever built, would be able to break that defense. NIST has been working for more than eight years on…
As we move into 2025, organizations are laser-focused on maximizing resources and achieving better business outcomes. Increasingly, this translates into leveraging AI and automation to streamline operations, improve efficiency, and enhance cybersecurity efforts. While we’re not on the brink of AI achieving sentience, its role in cybersecurity is undeniable—particularly in automating repetitive, time-consuming tasks. However, the same tools that empower defenders can be easily weaponized by adversaries, leading to a heightened and more complex threat landscape. Cybercriminals are adept at exploiting AI’s capabilities, applying timeless strategic principles like the one articulated by General George S. Patton: “A good solution applied…