Author: HackWatchit

Hackers siphoned about R$800 million ($140 million) from six reserve accounts connected to Brazil’s central bank after breaching São Paulo-based software vendor C&M Software on June 30, according to blockchain investigator ZachXBT and reports from local news outlets.Police said C&M employee João Nazareno Roque sold his corporate login for R$15,000 ($2,770) and later developed a secondary access tool for an additional R$10,000 ($1,850), giving attackers direct access to the vendor’s infrastructure.Investigators traced unauthorized instructions that moved funds from the reserve accounts held at the Central Bank of Brazil for interbank settlement into commercial bank accounts tied to over-the-counter (OTC) desks…

Content warning: Domestic abuse, stalking, controlling behavior, Schadenfreude, irony. The post Yet More Stalkerware Leaks Secret Data: ‘Catwatchful’ is Latest Nasty App appeared first on Security Boulevard.

Google says Veo 3, which is the company’s state-of-the-art video generator, is now shipping to everyone using the Gemini app with a $20 subscription. Previously, Veo 3 was only available in the United States via Flow, but you can now try it inside the Gemini app in India, Indonesia, and all of Europe. Google says you’ll get 3 video generations per day and limit resets every 24 hours. To get started, you need to subscribe to the $20 Gemini AI Pro plan. Once done, open the Gemini app or Gemini.google.com, and select video. Then, you need to describe your video,…

Following its June move to strengthen cybersecurity posture with the adoption of post-quantum cryptography, the European Commission this week rolled out its Quantum Strategy, aiming to position Europe as a global quantum leader by 2030. The plan focuses on building a resilient, sovereign quantum ecosystem to boost startups and turn scientific breakthroughs into market-ready solutions, while keeping Europe at the forefront of research. The Strategy zeroes in on five priority areas, including research and innovation, quantum infrastructure, ecosystem development, space and dual-use technologies, and workforce skills.  The Quantum Strategy includes launching the Quantum Europe Research and Innovation Initiative, a joint…

After the success of the Security Operations Center (SOC) at Cisco Live Melbourne (Asia Pacific Japan) 2024, the executive team green lit the first SOC for Cisco Live San Diego (Americas). Like any successful SOC, planning starts with a close partnership with the Network Operations Center (NOC), which deploys a team of engineers to build the network in the weeks ahead of the conference. The core missions of the SOC were: Protect: The network from threats and attacks, both within and without Educate: Attendees with SOC Tours and blogs Innovate: New integrations, processes, workflows and automations Watch the recording of…

For professionals actively engaged in analyzing and responding to incidents, particularly in 24/7 SOC environments, the ECIH certification provides essential knowledge and practical tools that are directly applicable to their responsibilities. The ECIH course prepared my team and me very well. It provided a structured framework for incident response, including a step-by-step methodology and insights into the technologies appropriate for each phase of an incident.

While Africa hosts some of the fastest-growing digital economies globally, it also faces persistent challenges in cybersecurity preparedness. Many organizations and individuals remain unaware of the risks they face online. Phishing schemes and social engineering tactics continue to succeed at alarming rates, often due to limited awareness of basic digital hygiene practices. Compounding the threat is a severe shortage of trained professionals. Africa has a small share of certified professionals, fewer than 25,000 across a population of 1.4 billion. This shortage leaves both public and private sectors exposed, with limited capacity to detect, prevent, or respond to attacks. Community-based responses…

Sally Vandeven // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. As pentesters we LOVE passwords – they come in all shapes and sizes. A good password has 16+ characters and a mix of case, digits and special characters so that a computer would require many years to brute force it.  Even though these passwords may be difficult to crack,…

There’s no official word on what the problem is, but Ingram Micro’s website has been down since Thursday morning. They claim to be “currently experiencing technical difficulties…” Are you thinking what I’m thinking? I really hope I’m wrong, but it’s not at all unusual for a cyber attack to be timed to coincide with a long holiday weekend in the United States… Ingram Micro might not be talking, but there’s plenty of speculation and bandying about of the term “ransomware” over on Reddit. Sign up to our free newsletter.Security news,…