Author: HackWatchit

The Cyber Security Agency of Singapore (CSA) released on Thursday an advisory on Software Bill of Materials (SBOM) and real-time vulnerability monitoring for open-source software (OSS) and third-party dependencies. The document offers software developers guidance on implementing a sustainable and automated approach to vulnerability management. The advisory was collaboratively developed by the CSA and the Open Worldwide Application Security Project (OWASP) Foundation. The agency recognizes that integrating OSS in software development introduces significant cybersecurity challenges, particularly regarding vulnerabilities in third-party dependencies. Notable incidents, such as Log4j and Heartbleed, underscore these risks. On Log4j, many organizations struggled to assess system compromises…

Human Trust  Most people associated with information technology roles understand the application of technical controls like the use of firewalls, encryption, and security products for defenses against digital threats. Proper configuration and implementation of these defense tools in keeping with industry best practices doesn’t hurt when it comes to fending off attacks. However, the vulnerability in human trust is something that can’t be precisely controlled like a firewall can. Trust is what human relationships are based on and relates to both the offline and online realms. In the digital realm, it takes on a unique dimension. Online interactions often lack…

When Stacklet’s founders, Travis Stanfield and Kapil Thangavelu, came out of Capital One in 2020 to launch their startup, most companies weren’t all that concerned with constraining cloud costs. But in the ensuing years, as they experienced economic headwinds, first from the pandemic, and then rising interest rates, it became an imperative. As such, Stacklet’s cloud cost control and governance platform has seen a rise in popularity. In fact, CEO Stanfield says that while he can’t get into specific numbers, revenue tripled year over year in 2023. Investors apparently liked what they saw, and made a $14.5 million investment to…

Airgeddon is a popular, free, and open-source wireless security auditing tool that helps penetration testers locate and exploit vulnerabilities in wireless networks. It is available for download from GitHub. Airgeddon runs on Kali Linux and other Debian-based distributions. To use Airgeddon, first ensure that your wireless card is compatible. Next, identify the target wireless network and select the appropriate attack mode. Then, launch the attack and wait for Airgeddon to crack the password. Finally, extract the password from the handshake file. Airgeddon is a powerful tool that can be used to easily find and exploit vulnerabilities in wireless networks. However,…

For the modern threat environment, strong authentication is a must. Malicious actors are leveraging traditional credential harvesting tactics more than ever, as well as using AI to enhance them. Organizations must reinforce their defenses and deploy multi-factor authentication (MFA) to protect access to sensitive data and applications. Recognizing this fact, Check Point is joining the Cybersecurity and Infrastructure Security Agency’s (CISA’s) Secure by Design pledge. This decision underscores our commitment to cyber security best practices like MFA, and further aligns Check Point with industry-leading standards to ensure robust security for our customers. What is MFA? MFA enhances authentication by requiring…

If you think your Gmail account’s been hacked, you’ll want to act. And act quickly. The fact is that your email has all manner of personal info in there. Receipts, tax correspondence, medical info, and so on. With a hacked account, that info might get deleted, shared, or used against you for identity theft. Luckily, Google has mechanisms in place to restore a hacked Gmail account. We’ll walk through the steps here — and a few others that can keep you secure in the long term after you have your account back. What are signs that your Gmail account got…

The article was written by Guanao Yan, Ph.D. student of Statistics and Data Science at UCLA. Guanao is the first author of the Nature Communications review article [1]. Spatially resolved transcriptomics (SRT) is revolutionizing Genomics by enabling the high-throughput measurement of gene expression while preserving spatial context. Unlike single-cell RNA sequencing (scRNA-seq), which captures transcriptomes without spatial location information, SRT allows researchers to map gene expression to precise locations within a tissue, providing insights into tissue organization, cellular interactions, and spatially coordinated gene activity. The increasing volume and complexity of SRT data necessitate the development of robust statistical and computational…

Residents of Tbilisi, the capital city of Georgia, experienced an unexpected and unusual start to their Friday morning commute. As they boarded their public transport buses, they were greeted by a barrage of sound emanating from the vehicles’ speakers.These buses had fallen victim to a hack orchestrated by anti-government protestors, who took control of the ticket scanners and point-of-sales devices. In a bold move, they transformed these everyday tools into platforms for political expression, using them to play pro-European music and slogans.The broadcast messages resonated with many of those on board:”Glory to Ukraine! Glory to Georgia! **** Russia!”The hacked devices…

Google Cloud recently announced that it will require all users to adopt multi-factor authentication (MFA) by the end of 2025, joining other major cloud providers like Amazon Web Services (AWS) and Microsoft Azure in mandating this critical security measure. As the threat landscape intensifies, with phishing and credential theft becoming common attack vectors, Google’s phased rollout of mandatory MFA marks a major step in the evolution of cloud security. Starting in November 2024, administrators will begin receiving guidance on implementing MFA, leading up to mandatory MFA for all new and existing users in early 2025, and eventually expanding to federated…