Author: HackWatchit

A new report reveals how inexpensive cybercrime can compromise even the most secure organizations. According to Hudson Rock, employees at key US defence entities, including the Pentagon, major contractors like Lockheed Martin and Honeywell, military branches, and federal agencies like the FBI, have fallen victim to Infostealer malware. These infections expose highly sensitive data, sometimes for as little as $10, without the need for advanced hacking techniques due to the most persistent security weakness: human error. How Did It Get Here? Infostealer doesn’t rely on flashy exploits or brute force. It plays the long game, waiting for unsuspecting users to…

Dream, an AI company providing cyber resilience for nations and critical infrastructure, today announced a $100 million Series B led by Bain Capital Ventures at a $1.1 billion valuation. Additional investors include Group 11, Tru Arrow, Tau Capital and Aleph. With this funding, Dream will further enhance its product capabilities and global market reach. Cybersecurity is no longer just a security challenge; it’s a massive data problem. Governments must navigate complex environments that include legacy systems, cloud infrastructure, and hybrid architectures, all while managing vast amounts of security data. At the same time, cyberattacks are becoming more advanced, with attackers…

WinRAR 7.10 was released yesterday with numerous features, such as larger memory pages, a dark mode, and the ability to fine-tune how Windows Mark-of-the-Web flags are propagated when extracting files. WinRAR is a popular file archiver and compression tool for Windows that allows users to create, extract, and manage compressed files, primarily in RAR, ZIP, and many other file formats. The author claims that the tool is used by 500 million people worldwide. Yesterday, win.rar GmbH released the final version of WinRAR 7.10, listing numerous new features that increase the performance and usability of the program. These new features include…

Do you ever feel overwhelmed by the number of data sources you manage with your SIEM? How do you piece together different pieces of the puzzle like SOAR, threat intelligence, and security tools for endpoint, cloud, or identity? Do you actually know which tools are strengthening your security posture, and which are just adding more complexity?  In this post, we share the common challenges SecOps teams face and discuss how the next generation of SIEMs are fundamentally changing how they unlock the potential of their security data.   Siloed Tools and Data Volumes Burden SecOps Teams With data volumes on the…

People under 60 are losing it online. And by it, I mean money—thanks to digital identity theft.  In its simplest form, your digital identity is made up of a whole host of things that can be traced back to you and who you are. That can range anywhere from photos you post online to online shopping accounts, email accounts to telephone numbers, and bank accounts to your tax ID.   In this way, your digital identity is like dozens upon dozens of puzzle pieces made up of different accounts, ID numbers, and so forth. When put together, they create a picture of you. And that’s why those little puzzle pieces of your identity are such attractive targets for hackers. If they get the right…

BlackLock is on track to become the most active ransomware-as-a-service (RaaS) outfit in 2025, according to ReliaQuest. Its success is primarily due to their unusually active presence and good reputation on the ransomware-focused Russian-language forum RAMP, and their aggressive recruiting of traffers (individuals that steer victims to harmful content/software), initial access brokers (IABs), and affiliates. What is BlackLock? BlackLock (aka El Dorado or Eldorado) cropped up in early 2024. It uses custom-built ransomware that can target Windows, VMWare ESXi, and Linux environments, but the group also exfiltrates victims’ data and threatens to publish it if the ransom isn’t paid. Its…

Hey guys, my name is Connor. I am a web developer here at BHIS who also loves hacking phones. Particularly, Android phones! Today, I am going to show you the basics on installing LineageOS onto your Android device while providing extra detail and background on the installation process as a whole. Although this tutorial is aimed at installing LineageOS specifically, the lessons taught here can be applied to installing other ROMs for your device.  What is Lineage? Why Lineage?  To understand Lineage, it would be good to first go over a little bit of history regarding Android. Android’s Operating System is…

The Trump administration appointed Caleb Vitello as the Acting Director of Immigration and Customs Enforcement (ICE) on January 20, 2025. Vitello will continue to perform these duties until the position is filled by appointment. In this role, he leads ICE’s workforce of over 20,000 federal law enforcement officers, attorneys, and mission support personnel in their duties of enforcing federal immigration laws, combatting transnational crime, and disrupting illicit trade. Vitello, a member of the Senior Executive Service, brings over 23 years of experience to the Acting Director position. Before his appointment, Vitello served as ICE’s Assistant Director for the Office of…

Juniper Networks fixed a critical flaw in Session Smart Routers Pierluigi Paganini February 18, 2025 Juniper Networks has addressed a critical vulnerability, tracked as CVE-2025-21589, impacting the Session Smart Router. Juniper Networks addressed a critical authentication bypass vulnerability, tracked as CVE-2025-21589 (CVSS score of 9.8), affecting its Session Smart Router product. “An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allow a network-based attacker to bypass authentication and take administrative control of the device.” reads the advisory. The vulnerability impacts Session Smart Router:  from 5.6.7 before 5.6.17,  from 6.0.8, from 6.1 before 6.1.12-lts, …