Watchers Lab

Community

Public to read. Membership required to participate.

Share information, learning notes, security resources, and project updates with the Watchers Lab community.

Recent Posts

Happy Independance Day!!

Posted by DiabloChops on 07/06/2026 at 03:17 PM

Good morning all, I just wanted to take a moment and celebrate this great country of ours! 250 years, thats quite an accomplishment, and something that all Americans should be proud of. That Makes the United States, and our beautiful democratic system the longest functioning government in history. No, it's not perfect, and remains perpetually a work iin progress, but this is still and always will be the best country in the world. I don't know about you, but I feel lucky to be an American. As we move into the next 250 years I think that the economy, the markets, and the country are at a precarious spot, but I feel that we are definitely heading toward better days. We all just need to stand back, relax a little bit, take a breath, and keep moving forward letting our own personal values, and morals guide us. In closing I want to to say thank you to my country and my fellow Americans, and shout at the top of my lungs "God Bless America!"

Comments

No comments yet.

Sign in or create an account to reply.

Do it yourself active website construction for 0 dollars

Posted by DiabloChops on 07/04/2026 at 05:35 PM

If anyone is interested, I have a comprehensive explanation and step by step guide that I put together while on the road to building this site. I want to offer this to anyone wishing to build a quality, beautiful, and functional site with little or no external help and minimum cash outlay to build and publish their own website. My aim is to help you build a website on your own without any other help using AI and "Vibe Coding". My guides are both instructive and informative, geared to the "techy" but not professional site builder. The base site includes standard tabs, and can implement unlimited customization. If your interested in this, register and sign in and message me in the contact page and I'll send you my complete multi file guide and instruction manual. Good Building, don't get frustrated, and push through!

Comments

No comments yet.

Sign in or create an account to reply.

Welcome to the Watchers Lab!

Posted by DiabloChops on 07/04/2026 at 05:29 PM

Hey there, Watchers. Thanks for looking at the site, and I hope that you are intrigued, curious, and active. I intend to watch analyze, and comment on all the things that interest me most, and hopefully I am not alone. We owe it to ourselves, our friends and families, and our fellow humans to stand up and shout! If this interests you then I urge you to sighn up, comment and criticize, and take part in this forum of 21st century thought with a look into the future. I personally try to keep politics out of my thought process until it forces it's way in, but we, here at Watchers Lab welcome all watchers of the human condition, so chime in and let your voice be heard! DiabloChops

Comments

No comments yet.

Sign in or create an account to reply.

U.S. government entity paid about $1 million to keep stolen files from being leaked. this comes from a new case study by Rakesh Krishnan for Ransom-ISAC, built on a leaked negotiation chat and the blockchain trail the payment left. The group that took the money calls itself Kairos, but it may not be a ransomware gang at all. Krishnan found no sign that it ever locked a single machine: no encryptor, no locker, no demand for a decryption key. The threat was simpler. Steal the files, then charge the victim not to publish them. The proof-of-theft files carry names like Union.xlsx, 1 union co psi template.doc, and a final archive called union.rar. The victim calls itself a small county with limited resources. The attacker leans on one folder in particular, marked "prosecutors office," warning that leaking it would help criminals dodge charges. The clues fit a real case. In May 2025, Union County, Ohio, said it detected ransomware on its network and later notified 45,487 residents and staff that their data had been taken, affecting most of the county of roughly 70,000. The stolen records ran from Social Security and financial details to fingerprints and passport numbers. It used the usual levers: a countdown timer, tight deadlines, and threats to dump the most sensitive folders first. The county paid on June 13, 2025, ten times its first offer.The payment was roughly 9.44 bitcoin, worth about $1 million at the time. Krishnan traced the money from there. Within hours, it was split in two and pushed through a chain of wallets toward deposit addresses tied to the crypto exchanges Bybit, OKX, and a Russian service called BELQI.

Comments

No comments yet.

Sign in or create an account to reply.

AI Attack

Posted by DiabloChops on 07/04/2026 at 05:09 PM

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by a large language model (LLM) agent, undoubtedly AI. JadePuffer used an autonomous AI agent for reconnaissance on the target, to steal credentials, move laterally, establish persistence, escalate privileges, and to encrypt data. The researchers say that the AI agent adapted to failures during the intrusion, much like a human operator would handle obstacles. The vendor fixed the flaw on April 1, 2025, and in early May of the same year, CISA tagged it as exploited in attacks targeting internet-exposed endpoints, usually deployed with minimal hardening but containing cloud credentials and API keys. The Bitcoin address listed in the ransom note is an example address widely used in public documentation, possibly the result of the LLM reproducing it from the training data. Other signs that AI was controlling the attack include detailed natural-language comments in the generated code describing operational reasoning and rapid attack iteration that considers the specific errors encountered, rather than being simple retries. The age of “agentic threat actors” (ATAs) has arrived, lowering the skill required for conducting damaging cyberattacks.

Comments

No comments yet.

Sign in or create an account to reply.