Author: HackWatchit

1. Introduction Ever since the introduction of the self-attention mechanism, Transformers have been the top choice when it comes to Natural Language Processing (NLP) tasks. Self-attention-based models are highly parallelizable and require substantially fewer parameters, making them much more computationally efficient, less prone to overfitting, and easier to fine-tune for domain-specific tasks [1]. Furthermore, the key advantage of transformers over past models (like RNN, LSTM, GRU and other neural-based architectures that dominated the NLP domain prior to the introduction of Transformers) is their ability to process input sequences of any length without losing context, through the use of the self-attention…

28 Sep 2023 Podcasts Segment from Access Granted: Practical Physical Exploitation – Ralph May & Travis Weathers –https://youtube.com/live/oaTEK9Feo5s  Talkin’ About Infosec News – 9/25/2023 Abusing Active Directory Certificate Services – Part One Looking For Something?Browse by category Select Category Alyssa Snow  (7) Ashley Knowles  (1) Ashley Van Hoesen  (1) Author  (402) Backdoors & Breaches  (7) Beau Bullock  (32) Ben Bowman  (1) Ben Burkhart  (1) Blue Team  (101) Blue Team Tools  (40) Brian Fehrman  (18) Brian Ireland  (1) Brian King  (20) Bronwen Aker  (1) C2  (29) Cameron Cartier  (2) Carrie Roberts  (5) Chris Traynor  (2) CJ Cox  (8) Connor Costigan  (1) Corey Ham  (3) Craig Vincent  (2) Dale Hobbs  (3) Daniel Pizarro  (1) Darin Roberts  (1) Dave Blandford  (2) David Fletcher  (30) David Perez  (1) Deb Wigley  (1) Debjeet Banerjee  (1)…

KELA researchers reported that the Black Basta leak revealed critical patterns used by ransomware operators to infiltrate corporate networks, particularly highlighting an attack on a Brazil-based manufacturing company where compromised credentials led to full network access and data exposure.  Additional insights from Qualys researchers indicated that the leak stemmed from internal conflicts and a retaliatory data dump related to attacks on Russian banks, providing a rare look into Black Basta’s tactics and leadership. Meanwhile, Ontinue researchers noted that Black Basta has been inactive since the start of the year due to these internal issues. The KELA report detailed leaked internal…

The surge in virtual card issuance — and the linking of banks, FinTechs, enterprises and brands to get those cards out into the market for daily use  — speaks volumes to how those cards are helping to form new commerce ecosystems for consumers and businesses. The purely digital flow, from card design to issuance to use, underpins new payment experiences. For the banks and the brands launching card products, the platform approach shortens the time to market to introduce, say, a BNPL card or a B2B-focused instrument that tailors spend management across a supply chain. The continued embrace of credentials…

One of the most notorious providers of abuse-friendly “bulletproof” web hosting for cybercriminals has started routing its operations through networks run by the Russian antivirus and security firm Kaspersky Lab, KrebsOnSecurity has learned. Security experts say the Russia-based service provider Prospero OOO (the triple O is the Russian version of “LLC”) has long been a persistent source of malicious software, botnet controllers, and a torrent of phishing websites. Last year, the French security firm Intrinsec detailed Prospero’s connections to bulletproof services advertised on Russian cybercrime forums under the names Securehost and BEARHOST. The bulletproof hosting provider BEARHOST. This screenshot has…

If you’re the parent of a tween or teen, chances are they’re not the only ones going back to school. Their smartphones are going back too. Our global research showed just how many tweens and teens use a smartphone. Plenty. Depending on the age band, that figure ranges anywhere from 76% to 93%, with some noteworthy variations between countries. One of the top reasons parents give their child a phone is to stay in touch, so it likely follows that those phones will likely make their way into the classroom. Whether or not that’s the case for your child, back-to-school…

U.S. authorities recovered $31 million in cryptocurrency stolen in 2021 cyberattacks on Uranium Finance, a Binance Smart Chain-based DeFi protocol. Uranium Finance was a decentralized finance (DeFi) protocol built on Binance’s BNB Chain that operated as an automated market maker (AMM) similar to Uniswap. The platform launched in April 2021, but hackers quickly exploited vulnerabilities in its smart contracts to drain its assets and push it to premature death, causing millions in investor losses. Blockchain intelligence firm TRM Labs reported today that it has aided the Southern District of New York (SDNY) and Homeland Security Investigations (HSI) San Diego in…

Attackers could hack smart solar systems and cause serious damages Pierluigi Paganini February 28, 2025 Hackers reveal security flaws in smart solar systems, exposing risks to national power grids as global reliance on solar energy grows. DW investigated the risks of cyber attacks exploiting vulnerabilities in smart solar systems while the demand for solar energy grows. The German news outlet DW interviewed hackers who’ve exposed security flaws in rooftop installations and solar power plants worldwide. One of these experts, the white hat hacker Aditya K Sood, demonstrated how weak or default passwords expose solar plants to cyber threats, allowing remote…

The Open Source Security Foundation (OpenSSF), a cross-industry initiative by the Linux Foundation, has announced the initial release of the Open Source Project Security Baseline (OSPS Baseline), a tiered framework of security practices that evolve with the maturity of open source projects. About the OSPS Baseline The OSPS Baseline compiles existing guidance from OpenSSF and other expert groups, outlining tasks, processes, artifacts, and configurations that enhance software development and consumption security and, in general, should lead to a better security posture for open source software projects. The outlined practices are related to access control, documentation, governance, build and release, security…