Author: HackWatchit
Secure every DNS request and response in real time. Now easier than ever to deploy. DNS-layer attacks are evolving fast, and attackers are actively exploiting gaps left by traditional defenses. It’s time to rethink how we protect this foundational internet protocol. Palo Alto Networks has long led the way in DNS threat prevention with Advanced DNS Security (ADNS) – a solution purpose-built to give organizations and customers stronger, more intelligent protection at the DNS layer. ADNS inspects both DNS requests and responses in real time, stopping threats like command and control (C2), DNS tunneling and data exfiltration before they can…
Ahh, the sea. vacation on the Mediterranean Sea, I found myself lying on the beach, staring into the waves. Lady Luck was having a good day: the sun glared down from a blue and cloudless sky, heating the sand and salty sea around me. For the first time in a while, I had downtime. There was nothing related to ML in the remote region where I was, where the rough roads would have scared away anybody who is used to the even pavements of western countries. Then, away from work and, partially, civilization, somewhere between zoning out and full-on daydreaming,…
Container Escape Vectors Container escape allows attackers to break out of container isolation boundaries and access the underlying host system. These escape vectors typically exploit flaws in container configuration, application or library vulnerabilities, or kernel weaknesses. Let’s review some examples of container escape vectors. Privileged Container Abuse Containers running in privileged mode effectively disable most security mechanisms, granting near-equivalent access to the host system. This configuration is particularly dangerous as it allows attackers the ability to load kernel modules, potentially mount sensitive host filesystems, and gain full access to host devices. Volume Mount Exploits Improper volume mounts can create direct…
The ringleader of the Jetflicks illegal paid streaming operation, a massive service with tens of thousands of subscribers, was sentenced to seven years in prison. Together with four other accomplices, 42-year-old Kristopher Lee Dallmann of Las Vegas, Nevada, was convicted in June 2024 of conspiracy to commit copyright infringement. Dallmann was also found guilty by a federal jury of money laundering, criminal copyright infringement by distribution, and criminal copyright infringement by public performance. “Dallmann reaped millions of dollars in profit from the operation. The government conservatively estimated the value of the copyright infringement in the case at $37.5 million,” the…
Cervantes is an open-source collaborative platform built for pentesters and red teams. It offers a centralized workspace to manage projects, clients, vulnerabilities, and reports, all in one place. By streamlining data organization and team coordination, it helps reduce the time and complexity involved in planning and executing penetration tests. As an open-source solution under the OWASP umbrella, it understands the specific needs of penetration testers from managing targets to organizing vulnerabilities, proof-of-concepts and remediation recommendations. “Unlike many security tools where collaboration feels like an afterthought, Cervantes is designed from the ground up as a collaborative platform. Multiple pentesters can work…
The rise of AI-driven cyber threats has introduced a new level of sophistication to phishing scams, particularly those targeting Gmail users. Criminals are using artificial intelligence to create eerily realistic impersonations of Google support representatives, Forbes recently reported. These scams don’t just rely on misleading emails; they also include convincing phone calls that appear to come from legitimate sources. If you receive a call claiming to be from Google support, just hang up—this could be an AI-driven scam designed to trick you into handing over your Gmail credentials. Here’s everything you need to know about the scam and how to…
A new phishing campaign is targeting users of the U.S. Department of Education’s G5 portal, a site used by educational institutions and vendors to manage grants and federal education funding. Threat researchers at BforeAI uncovered a cluster of lookalike domains designed to steal user credentials by mimicking the official G5.gov login page. Cloned version of the G5 portal (Source: BforeAI) The attack uses deceptive domains like g5parameters.com and g4parameters.com, among others, that copy the visual layout and structure of the real G5 portal. These fake sites include login forms that appear legitimate and even replicate help desk information from the…
We’re seeing fewer attacks, but that doesn’t mean we’re safer. The latest data from NCC Group shows traditional ransomware is down — but threat actors are regrouping, rebranding, and rearming with AI and advanced social engineering. The post Is Ransomware Dying? Don’t Break Out the Champagne Just Yet appeared first on Security Boulevard.
Microsoft linked attacks on SharePoint flaws to China-nexus actors Pierluigi Paganini July 23, 2025 Microsoft linked SharePoint exploits to China-nexus groups Linen Typhoon, Violet Typhoon, and Storm-2603, active since July 7, 2025. Microsoft confirmed that China-linked groups Linen Typhoon, Violet Typhoon, and Storm-2603 exploited SharePoint flaws for initial access as early as July 7, 2025. “As of this writing, Microsoft has observed two named Chinese nation-state actors, Linen Typhoon and Violet Typhoon exploiting these vulnerabilities targeting internet-facing SharePoint servers.” reads a report published by Microsoft. “In addition, we have observed another China-based threat actor, tracked as Storm-2603, exploiting these vulnerabilities.”…