Author: HackWatchit

A joint blog featuring CISO Global’s Compliance Team & PreVeil February 27, 2025 The long-anticipated CMMC rule (CFR 32) is now live, marking a crucial turning point for defense contractors. The Compliance Team at CISO Global recently passed our CMMC Audit and are well on the way to becoming a CMMC Certified Third-Party Assessor Organization, or C3PAO. Although CMMC’s arrival brings new challenges, there’s a practical solution that can make compliance more manageable: enclaves. Before we explore this approach, let’s understand where we are in the CMMC journey. The CMMC Landscape Today  Defense contractors handling controlled unclassified information (CUI) have…

In cybersecurity, it’s critical to understand your risk. This requires a clear understanding of your attack surface and vulnerabilities. But an attack surface is not static—it grows and shrinks as new endpoints come online, legacy tools are offloaded, and attackers shift their strategies. At the same time, the threat landscape is evolving rapidly. According to CVE.org, hundreds of exploited vulnerabilities are recorded every day—over 40,000 in 2024 alone, a 38% increase from 2023. To stay ahead, security teams need a new approach: continuous, automated validation. Why You Can’t Rely on Prioritization Alone Prioritizing vulnerabilities is a foundational step in managing…

Investors are urging Revolut to consider another secondary share sale as new stakeholders seek entry into the fintech firm, Bloomberg News reported on Feb. 27.Sources familiar with the matter told the news outlet that some shareholders were willing to sell shares in a transaction that could value the company at $60 billion.This represents a substantial increase from Revolut’s $45 billion valuation in a secondary sale conducted six months ago. Sources said the fintech has not yet initiated an offering and would need to authorize such a move.The discussions emerge as the company prepares to report approximately $1 billion in pre-tax…

It’s been nearly a year since Lastpass was breached and users’ encrypted vaults were stolen.  I had already migrated to a different password manager for all my existing and new accounts, but I had been putting off rotating passwords for existing accounts. I was like the child who plugs his ears while chanting, “La, la, la, I can’t hear you. I have a long master password,” while his parents try to provide wisdom. I know I’m not alone in this either.  Recently, there’s even been evidence that attackers have cracked users’ vaults and begun stealing cryptocurrency from the victims. This…

Great online customer support starts with the fundamentals that make shoppers feel valued and understood when they can’t see your face or walk into your store. The basics include responding quickly across multiple channels, writing in a friendly human tone (not corporate-speak), and making it super easy for customers to find help when they need it. Mastering these foundational elements builds trust with online shoppers and sets the stage for turning one-time buyers into loyal repeat customers. According to WOW24-7, an e-commerce customer service outsourcing provider, recent studies highlight the impact of customer service quality on online shopping behaviour. In…

Welcome to part 2 of my LLM deep dive. If you’ve not read Part 1, I highly encourage you to check it out first.  Previously, we covered the first two major stages of training an LLM: Pre-training — Learning from massive datasets to form a base model. Supervised fine-tuning (SFT) — Refining the model with curated examples to make it useful. Now, we’re diving into the next major stage: Reinforcement Learning (RL). While pre-training and SFT are well-established, RL is still evolving but has become a critical part of the training pipeline. I’ve taken reference from Andrej Karpathy’s widely popular 3.5-hour YouTube. Andrej is…

CrowdStrike has been named a Leader in The Forrester Wave™: Managed Detection and Response (MDR) Services, Q1 2025.  Forrester researched, analyzed, and scored the ten most significant vendors in the MDR market. CrowdStrike was named a Leader and ranked highest of any vendor evaluated in the Strategy category. We also received the highest possible scores in the criteria of Detection surface: Endpoint; Detection surface: Identity; Managed investigation; Threat hunting; Analyst experience; and Dashboards and reporting within the Current Offering category. We believe this recognition reinforces our commitment to delivering industry-leading managed protection that effectively counters modern cyberattacks spanning multiple domains…

Throughout history, women have been at the forefront of solving problems and driving innovation, especially in STEM. From Ada Lovelace creating the first computer algorithm to Katherine Goble Johnson who calculated and analyzed the flight paths of spacecraft, women have always been pivotal in shaping progress.  Cybersecurity has grown from a specialized area to a vital industry impacting nearly every part of our daily lives: protecting personal data, securing national infrastructure and online transactions, and ensuring our digital communities’ safety. Yet, despite its increasing significance, women continue to be underrepresented. Women held 25 percent of cybersecurity jobs globally in 2022,…

The internet is brimming with content designed to entertain, inform—and sometimes deceive. The latest tool in a cybercriminal’s arsenal? Deepfakes. From fabricated celebrity endorsements to fraudulent job interviews, AI-generated deepfake scams are growing at an alarming rate. As deepfake technology becomes more advanced, it’s harder than ever to discern real from fake—until it’s too late.  According to McAfee’s latest “State of the Scamiverse” report, deepfake scams have become an everyday reality. The average American now encounters 2.6 deepfake videos daily, with younger adults (18-24) seeing even more – about 3.5 per day. And for less than the cost of a latte…