Author: HackWatchit
Cisco removed the backdoor account from its Unified Communications Manager Pierluigi Paganini July 02, 2025 Digital communications technology giant Cisco addressed a static SSH credentials vulnerability in its Unified Communications Manager (Unified CM). A flaw, tracked as CVE-2025-20309 (CVSS score of 10), in Cisco Unified Communications Manager and its Session Management Edition lets remote attackers log in using hardcoded root credentials set during development. Cisco Unified Communications Manager (CUCM) is a call processing system developed by Cisco for enterprise-level voice, video, messaging, and mobility communications. These static credentials can’t be changed or deleted. If attackers exploit this issue, they can access the…
North Korean state-backed hackers have been using a new family of macOS malware called NimDoor in a campaign that targets web3 and cryptocurrency organizations. Researchers analyzing the payloads discovered that the attacker relied on unusual techniques and a previously unseen signal-based persistence mechanism. The attack chain, which involves contacting victims via Telegram and luring them into running a fake Zoom SDK update, delivered via Calendly and email, resembles the one Huntress managed security platform recently linked to BlueNoroff. Advanced macOS malware In a report today, researchers at cybersecurity company SentinelOne says that the threat actor used C++ and Nim-compiled binaries (collectively tracked as NimDoor…
Brian King // There’s a one-liner password spray script that a lot of folks use to see if anyone on a domain is using a bad password like LetMeIn! or […] The post Check\ Your\ Tools appeared first on Black Hills Information Security, Inc..
Exabeam announced a major expansion of its integrated multi-agent AI system Exabeam Nova that now equips security leaders with a real-time strategic planning engine and boardroom communication tool. The Exabeam Nova Advisor Agent is the AI capability designed to turn security data into a strategy that CISOs can defend in the boardroom. Translating complex security metrics into business-relevant terms has been a long-standing challenge, making it difficult to demonstrate risk reduction, prove the value of security investments, and show measurable progress. The new Exabeam Nova Advisor Agent solves that problem. Exabeam Nova is now the only agentic AI that empowers…
At the Cisco Live San Diego 2025 conference Security Operations Center (SOC), the SPAN (Switched Port Analyzer) traffic that we receive from the NOC is nearly 80% encrypted traffic. This means if we only investigate unencrypted traffic, we are missing most of the packets flying across the network. The Encrypted Visibility Engine (EVE) is a feature in Cisco Secure Firewall that provides visibility into encrypted TLS (HTTPS) traffic without needing to decrypt it. It leverages TLS fingerprinting to detect and classify applications, malware, and other behaviors in encrypted flows while preserving privacy. We observed a machine with multiple alerts for…
Cybersecurity never stands still. One week it’s AI-powered attacks, the next it’s a new data breach, regulation, or budget cut. With all that noise, it’s easy to get distracted. But at the end of the day, the goal stays the same: protect the business. CISOs are being asked to juggle more, with tighter resources, more boardroom time, and threats that keep changing. Here are five areas that deserve your attention now and going forward. Get visibility and reduce your exposure Start with the basics, and know what you’re defending. Asset inventories should be real-time and complete. This includes shadow IT,…
A group of hackers gained remote access to a hydroelectric dam’s control systems in Norway and fully opened a drainage valve, releasing a large amount of water. For four hours it went unnoticed. This wasn’t a hacker’s prank. This was a critical piece of infrastructure being remotely manipulated by an unauthorised party. Sign up to our free newsletter.Security news, advice, and tips. Details so far are sparse, but it would not be a surprise if we found the problem was compounded by lax password security. Read more in these media…
NEW YORK, June 24, 2025 (Newswire.com) – Big Interview, a leader in job interview training and career readiness, announced today a partnership with Verizon as part of its nationwide Verizon Forward and Skill Forward initiatives. The goal: to ensure that participants-many of whom come from under-resourced backgrounds-have the tools to turn their newly acquired skills into higher-paying, long-term employment. As part of Verizon’s goal to train 50,000 individuals by 2030 to help them advance their careers, this collaboration brings world-class interview preparation and coaching directly to Skill Forward learners at no cost. “We’re honored to support Verizon Forward customers and Skill Forward participants as they take the…
Qantas has confirmed a data breach after attackers gained access through a third-party call centre platform, affecting millions of frequent flyers just as the airline industry heads into its busiest season. The breach was discovered on July 1 2025 when the airline’s cybersecurity team flagged suspicious activity on systems run by an external contact centre provider. Initial estimates, as per Qantas’ press release, indicate that records for up to six million customers may have been exposed, including names, email addresses, phone numbers, dates of birth and frequent flyer numbers. Qantas says no financial data, passwords or passports were affected. While…