Author: HackWatchit

Mike Perez // BHIS does a lot of outreach via our blog, HackNaked.TV, training, and especially webcasts.  In the course of outreach, sometimes folks come to us whom never had a pentest, or interestingly, had a pentest and are unhappy with the results.   When probing customers about those unhappy results, many of those experiences seem to have two common elements: Black Box testing and/or more fundamentally, mismatched expectations. Now Black Box testing definitely has its place.  Examples might include: Your new application has security reviews baked into the development cycle. You perform your own internal pentests. Your site has…

Ever searched for your name on Facebook? It’s shockingly easy to find your profile online. That usually leads to the question: How do I make my Facebook profile unsearchable? The good news? Facebook has privacy settings to hide your profile from search. Privacy-conscious users often want to remain invisible in Facebook search results. Whether you’re a professional, an influencer, or someone who values privacy, it’s crucial to know how to manage your visibility. In this guide, we’ll show you how to make your Facebook profile unsearchable, step-by-step. Ready to dive into the How People Find and Contact You section in…

Air and Marine Operations (AMO), an operational component of U.S. Customs and Border Protection, collaborated with Dutch, French and British law enforcement in an operation last week that resulted in the seizure of 1440 kilograms (3,175 pounds) of cocaine near Virgin Gorda, British Virgin Islands. “This interdiction is a testament to the power of continued collaboration among trusted international partners,” Christopher Hunter, Director, Caribbean Air and Marine Branch. “Our shared commitment to regional security and maritime vigilance continues to yield results that protect our communities and uphold the rule of law across the Caribbean.” On June 17, a French Customs…

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Ransomware Gangs Collapse as Qilin Seizes Control Dissecting a Python Ransomware distributed through GitHub repositories SparkKitty, SparkCat’s little brother: A new Trojan spy found in the App Store and Google Play Uncovering a Tor-Enabled Docker Exploit Threat Actors Modify and Re-Create Commercial Software to Steal Users’ Information Resurgence of the Prometei Botnet ConnectUnwise: Threat actors abuse ConnectWise as builder for signed malware GIFTEDCROOK’s Strategic Pivot: From Browser Stealer to Data Exfiltration Platform During Critical Ukraine Negotiations Hive0154 aka Mustang Panda shifts…

By Gary S. Miliefsky, Publisher of Cyber Defense Magazine Introduction In late 2024, cybercriminals breached Ahold Delhaize USA Services, LLC, exposing the personal data of millions of current and former employees of major grocery chains including Food Lion, Stop & Shop, Giant, Hannaford, and Peapod. The attackers, a ransomware group known as INC Ransom, claimed responsibility and released proof of the stolen data online. The stolen information included names, contact details, Social Security numbers, bank accounts, driver’s license numbers, and in some cases, employment and medical records. Source: WMUR Scope of The Incident This is a very significant supply chain…

Logan Lembke // Living in the information age is great, isn’t it? With just a visit to the internet you can learn what happened in London on September 2nd, 1666, what your friends are up to on the other side of the country, and even buy a new set of homemade fuzzy slippers with nothing but your credit card number, name, and address. While you might not care who knows that you’re a bit of an English history buff or that you might have a slight Facebook addiction, you might just want to keep it a secret that you occasionally…

In the latest development for the ongoing LIBRA coin legal saga, Argentinian newspaper La Nacion reports that Hayden Mark Davis, CEO of Kelsier Ventures, submitted a voluntary statement last Monday to a federal court in New York. The case centers on a class action lawsuit brought by U.S. investors who suffered losses following the rapid rise and subsequent collapse of the controversial LIBRA token.Davis strongly denied any allegations of fraud, insider trading, or other misconduct. Instead, he attributed the token’s sudden price drop to Argentine President Javier Milei’s decision to delete a social media post endorsing LIBRA. According to Davis,…

Cybersecurity professionals have long worried that the eventual introduction of useful, fault-tolerant quantum computers will make modern encryption keys obsolete, exposing massive amounts of data encrypted today to bad actors within a few years.Today’s AES and RSA encryption models rely on the randomness in the keys and prime numbers to help thwart bad actors that are trying using computers to decrypt the data they’ve stolen.“If a password or code is an unguessable string of numbers, it’s harder to crack,” experts at the National Institute of Standards and Technology (NIST) wrote this month. “Many of our cryptographic systems today use random…

Vulnerabilities affecting a Bluetooth chipset present in more than two dozen audio devices from ten vendors can be exploited for eavesdropping or stealing sensitive information. Researchers confirmed that 29 devices from Beyerdynamic, Bose, Sony, Marshall, Jabra, JBL, Jlab, EarisMax, MoerLabs, and Teufel are affected. The list of impacted products includes speakers, earbuds, headphones, and wireless microphones. The security problems could be leveraged to take over a vulnerable product and on some phones, an attacker within connection range may be able to extract call history and contacts. Snooping over a Bluetooth connection At the TROOPERS security conference in Germany, researchers at…