Author: HackWatchit

Outpost24’s KrakenLabs reveals EncryptHub’s multi-stage malware campaign, exposing their infrastructure and tactics through critical OPSEC failures. Learn how this rising cybercriminal group operates and the threats they pose.   In a recent in-depth investigation, Outpost24’s specialized threat intelligence team, KrakenLabs, identified previously undisclosed aspects of a sophisticated malware operation known as EncryptHub. KrakenLabs’ analysis, shared with Hackread.com, provides a detailed understanding of the group’s operational infrastructure, tools, and characteristic behavioural patterns. This enhanced understanding was made possible by a series of security lapses on the part of EncryptHub, which, according to Outpost24, inadvertently exposed crucial elements of their malicious ecosystem.…

Read More

Data hoarding occurs when people or organizations save excessive digital data, often without a clear need. Whether it’s photos, old documents, or backups, this habit can lead to so-called digital clutter, security risks, and even legal issues. People hoard data for many reasons: anxiety over losing meaningful data, strict workplace policies, or simple neglect. The result? Increased costs, tougher compliance, and a greater likelihood of security breaches. In day-to-day life, it can cause stress and decreased productivity from struggling to maintain a tidy digital workspace. This article explores the different kinds of data hoarders, commonly hoarded files, and the risks…

Read More

What if you want to write the whole object detection training pipeline from scratch, so you can understand each step and be able to customize it? That’s what I set out to do. I examined several well-known object detection pipelines and designed one that best suits my needs and tasks. Thanks to Ultralytics, YOLOx, DAMO-YOLO, RT-DETR and D-FINE repos, I leveraged them to gain deeper understanding into various design details. I ended up implementing SoTA real-time object detection model D-FINE in my custom pipeline. Plan Dataset, Augmentations and transforms: Mosaic (with affine transforms) Mixup and Cutout Other augmentations with bounding…

Read More

Key Takeaways:  > OIG found two primary areas of concern: document deficiencies and reporting delays. > Recommendation 1: TSA revise the 2022 Surface Operations Program Manual to ensure accurate data collection and detailed supervisory review.  > Recommendation 2: TSA complete and submit the 2023 Annual Report on Transportation Security to Congress The Office of Inspector General (OIG) released its report examining the Transportation Security Administration’s (TSA) oversight of passenger rail security. The report, issued on March 3, offers a mixed assessment of TSA’s performance, acknowledging successes while highlighting significant areas for improvement.   Background on U.S. Passenger Rail  The United States…

Read More

Cameron Cartier // Every Android application has a “manifest.xml” file located in the root directory of the APK. (Remember APKs are just zip files.) The manifest file is like a guide to the application. It describes all of the components of the app, the application permissions, and the required hardware/software features. Developer misconfigurations to this file — for example, marking an activity as exported — can have serious effects on the application’s security. Many static analysis tools (i.e., MobSF) get a lot of their information by simply parsing this file. In this blog, we are going to walk through a…

Read More

TP-Link in crosshairs, along with other  brands.Chinese consumer-grade networking gear is a dangerous security threat, argue these fine gentlemen. Rep. Raja Krishnamoorthi (D-Illinois), Rob Joyce (former NSA director of cybersecurity) and Rep. John Moolenaar (R-Michigan) have hatched a plan to eradicate TP-Link routers and other plastic pigs from our homes.But TP-Link is spitting feathers, arguing it’s not been a “Chinese” company for ages. In today’s SB  Blogwatch, we get real with OpenWRT.Your humble blog­watcher curated these bloggy bits for your enter­tain­ment. Not to mention:  Tilt/Shift.Sino Stoppage SchemeWhat’s the craic? Michael Martina reports: Congressional panel urges Americans to ditch China-made routers“Baseless and without merit”The…

Read More

On March 7, 2025, KuCoin, a prominent global cryptocurrency exchange headquartered in Hong Kong, unveiled its KCS Loyalty Level Program, marking a significant evolution in its ecosystem. This initiative, launched on the very day of this report, introduces a structured, tiered system aimed at rewarding users who hold and stake KuCoin’s native token, KCS (KuCoin Shares). With a user base exceeding 39 million worldwide, KuCoin’s move reflects a broader trend in the crypto industry: enhancing the utility of platform-specific tokens to foster deeper user engagement. But what does this mean for the average trader, the long-term investor, or the newcomer…

Read More

Mirai-based botnets exploit CVE-2025-1316 zero-day in Edimax IP cameras Pierluigi Paganini March 07, 2025 Mirai-based botnets are exploiting a zero-day flaw, tracked as CVE-2025-1316, in Edimax IP cameras, to achieve remote command execution. US CISA warns that multiple botnets are exploiting a recently disclosed vulnerability, tracked as CVE-2025-1316 (CVSS score of 9.8), in Edimax IC-7100 IP cameras. The issue is an Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’. Edimax IC-7100 fails to properly sanitize requests, an attacker can create specially crafted requests to achieve remote code execution on the device. Report suspected malicious activity…

Read More

In its partnership with Junior Achievement over the last eight years, ReliaQuest has invested over 1,500 volunteer hours with hundreds of students—raising awareness of the importance of cybersecurity and the opportunities within the industry. In recognition of this commitment, ReliaQuest has been awarded the Bronze U.S. President’s Volunteer Service Award, an award created to recognize individuals and organizations who contribute significant time and resources toward volunteer service. “Volunteers play an integral part in the delivery of Junior Achievement’s learning experiences,” said president of Junior Achievement Tampa Bay Richard George. “We are grateful for the role these partners play in helping…

Read More