Author: HackWatchit

Introduction Power, water, gas, and tribal utilities serve as the backbone of modern society, providing essential services that sustain daily life. However, these critical infrastructures face an escalating threat landscape characterized by cyberattacks that can disrupt services, compromise sensitive data, and threaten public safety. As utilities work to fortify their digital defenses, a new and formidable challenge is emerging on the horizon: quantum computing. Quantum computers, while promising revolutionary advancements in fields such as materials science, medicine, and logistics, pose an existential threat to existing encryption protocols. These advanced machines have the capability to break the mathematical foundations of current…

Recent findings from Symantec indicate a significant rise in Medusa ransomware activity, which is reportedly being operated as a ransomware-as-a-service (RaaS) by a group identified by Symantec’s Threat Hunter Team as Spearwing. The attacks employing this ransomware have demonstrated consistent tactics, techniques, and procedures (TTPs), with a steady increase observed since 2023.  The data disclosed that Medusa ransomware attacks surged 42 percent between 2023 and 2024. This upward trend continues, with nearly double the number of Medusa attacks recorded in January and February 2025 compared to the same period in 2024. In the first two months of 2025, the group…

In business, the path to value creation requires more than strategic planning and execution—it demands an ability to connect the dots, anticipate needs, and understand the human elements that drive progress. Women often demonstrate these capabilities through their natural inclination to consider multiple perspectives and implications before making decisions. This approach, which emphasizes understanding the complete picture rather than just individual components, can lead to more sustainable and meaningful business outcomes. In honor of International Women’s Day, this blog post invites readers to take a closer look at how women move mountains in the corporate and technology landscapes, encouraging innovation…

Storage fees in general (e.g., API calls, operations, data access) comprise 49% of an average user’s service bill, compared to the actual stored capacity, according to a study conducted by Vanson Bourne. Nearly all organizations globally have experienced data security-related benefits from public cloud storage. The top security benefits are: Improved data security capabilities compared to the previous environment. Easier prevention/mitigation of unplanned data loss events. Cloud storage costs continue to soar Storage fee vs. capacity billing split (49% fees, 51% capacity) remains consistent with findings from the past two years, unfortunately indicating little to no improvement in this billing…

Mobile App Testing is a category showing no signs of slowing down. In this video, BHIS tester Cameron Cartier walks us through linking Genymotion to Burp Suite for traffic monitoring. Included below are the commands referenced in the video. General List devices: Adb devices -l Connect to the listed device: Adb connect : Go to shell on connected device: Adb shell Openssl Commands for Converting the Burp Cert openssl x509 -inform DER -in burp.cer -out burp.pem openssl x509 -inform PEM -subject_hash_old -in burp.pem | head -1 mv burp.pem 9a5ba575.0 adb root adb remount adb push 9a5ba575.0 /sdcard/ adb shell mv…

The administrators of the Russian Garantex crypto-exchange have been charged in the United States with facilitating money laundering for criminal organizations and violating sanctions. 46-year-old Lithuanian national and Russian resident Aleksej Besciokov and 40-year-old Russian national and United Arab Emirates resident Aleksandr Mira Serda—who controlled Garantex between 2019 and 2025—are charged with money laundering conspiracy which carries a maximum penalty of 20 years in prison. Besciokov was also charged with conspiracy to operate an unlicensed money-transmitting business (maximum penalty of five years in prison) and violating the International Emergency Economic Powers Act (maximum penalty of 20 years). “Since April 2019,…

Microsoft Threat Intelligence exposes a malvertising campaign exploiting GitHub, Discord, and Dropbox. Discover the multi-stage attack chain, the use of LOLBAS, and the various malware payloads. Get detailed analysis, IOCs, and mitigation recommendations. Microsoft’s Threat Intelligence team has recently dismantled a large-scale malvertising campaign that impacted nearly one million devices worldwide. The primary targets were Windows systems running various browsers, including Chrome and Edge and it impacted a wide range of organizations, from individual users to large enterprises, which demonstrates its widespread impact. Tracked under the name Storm-0408, this campaign was discovered in December 2024 and involved a multi-stage attack…

As federal agencies advance their zero trust implementations, the next crucial step is achieving unified visibility across all systems, users and interactions. Zero trust cannot be effective at speed and scale without this level of observability. To achieve this unified visibility, all components of a zero trust architecture must generate data that is observable, available and able to be correlated within a unified data plane, regardless of data type, source or location. The data layer must operate across cloud, on-premises and in disrupted, disconnected, intermittent and low-bandwidth (DDIL) environments that are part of Defense and intelligence operations. Often referred to…

Topic: Harnessing AI for Ethical Hacking: Challenges and Opportunities Watch Now Abstract: As AI-driven hacking capabilities have progressed, they have been used by both security teams and threat actors to explore and exploit weaknesses within networks. Thus, AI-driven hacking tools present both an opportunity and challenge for ethical hackers in advancing penetration testing capabilities. This webinar examines how AI tools and techniques have impacted the threat landscape and cybersecurity practices. From automation to predictive analytics and self-learning capabilities, AI is a potent tool for both pen testers and adversaries. It also addresses challenges associated with AI models, such as biases, misuse,…