Author: HackWatchit

Whether we recognize it or not, anytime an incident occurs, it sets off the grieving process. But grief isn’t a bad thing: it’s how we process our emotional reactions and move on. That’s precisely what security teams need to do in the wake of a cyber incident—and you’d be surprised how well the stages of incident response map to the famous “Five Stages of Grief.” Starting with denial and moving through anger, bargaining, depression, and acceptance, security experts can take a few lessons from the grieving process: Denial (analysis) In many ways, denial is the most difficult stage of grief.…

When it comes to protecting your privacy, take a close look at your social media use—because sharing can quickly turn into oversharing.  The term “oversharing” carries several different definitions. Yet in our case here, oversharing means saying more than one should to more people than they should. Consider the audience you have across your social media profiles. Perhaps you have dozens, if not hundreds of friends and followers. All with various degrees of closeness and familiarity. Who among them can you absolutely trust with the information you share?  And you might be sharing more than you think. Posts have a…

Polish Space Agency POLSA disconnected its network following a cyberattack Pierluigi Paganini March 05, 2025 The Polish space agency POLSA announced it has disconnected its network from the internet following a cyberattack. The Polish space agency POLSA was forced to disconnect its network from the internet in response to a cyberattack. The agency revealed that it has disconnected its infrastructure to contain the attack and secure data, a circumstance that suggests it was the victim of a ransomware attack. “A cybersecurity incident has occurred at POLSA. The relevant services and institutions have been informed. An analysis of the situation is…

Tokenization is increasingly being recognized as a powerful security measure for protecting sensitive payment data within financial institutions. By replacing sensitive information, such as credit card numbers or bank account details, with randomly generated “tokens,” tokenization reduces the risk of data breaches and fraud. These tokens have no exploitable value outside the specific environment they were created for, ensuring that even if intercepted, they cannot be used by malicious actors. In the context of financial institutions, tokenization offers several key advantages: 1.  Data Protection: With tokenization, sensitive payment data is never stored in its original form, significantly lowering the risk…

The US Cybersecurity and Infrastructure Security Agency says that media reports about it being directed to no longer follow or report on Russian cyber activity are untrue, and its mission remains unchanged. “CISA’s mission is to defend against all cyber threats to U.S. Critical Infrastructure, including from Russia,” the US cyber agency posted to X. “There has been no change in our posture. Any reporting to the contrary is fake and undermines our national security.” Read the rest of the story at Bleeping Computer.

I have been a data team manager for six months, and my team has grown from three to five. I wrote about my initial manager experiences back in November. In this article, I want to talk about something that is more essential to the relationship between a DS or DA individual contributor (IC) and their manager — the 1:1 meetings. I remember when I first started my career, I felt nervous and awkward in my 1:1s, as I didn’t know what to expect or what was useful. Now, having been on both sides during 1:1s, I understand better how to…

shenetworks // One day at work I received a case stating a client couldn’t connect to the management interface of a new server. I asked the client to change the IP address of the management interface and try to connect, and the test was successful. The client was confused and asked why the original IP address wouldn’t work. I asked them to ping the old address and the client was surprised to receive a response back. That IP address was assigned to a device somewhere else on the network. While there are new programs that can help manage your IP…

New research has uncovered further links between the Black Basta and Cactus ransomware gangs, with members of both groups utilizing the same social engineering attacks and the BackConnect proxy malware for post-exploitation access to corporate networks. In January, Zscaler discovered a Zloader malware sample that contained what appeared to be a new DNS tunneling feature. Further research by Walmart indicated that Zloader was dropping a new proxy malware called BackConnect that contained code references to the Qbot (QakBot) malware. BackConnect is malware that acts as a proxy tool for remote access to compromised servers. BackConnect allows cybercriminals to tunnel traffic, obfuscate their…

NTT DATA and Palo Alto Networks have partnered to enhance private 5G security for industrial deployments to empower enterprises to securely embrace the next wave of digital transformation and drive innovation with confidence. Why Visibility Is Critical in Private 5G Networks 5G as a technology is acknowledged to be secure. It is possibly the most secure wireless technology commercially available today. With SIM-based access control, a plethora of security features built into the service-based architecture of the core, as well as the end-to-end encrypted traffic, the technology certainly lives up to its “most secure” mantra. But, when it comes to…