Author: HackWatchit

Forcepoint’s X-Labs reveals Remcos malware using new tricky phishing emails from compromised accounts and advanced evasion techniques like path bypass to infiltrate systems, steal credentials, and maintain long-term control. Learn how to spot the signs. Cybersecurity experts at Forcepoint’s X-Labs are warning about the continued activity of Remcos malware, a sophisticated threat that consistently adapts to bypass security measures and maintain a hidden presence on infected computers. This malware, often delivered through convincing phishing attacks, allows attackers to establish long-term access. Reportedly, campaigns observed between 2024-2025 show Remcos malware remains highly active, continually adapting to stay hidden, researchers noted in…

Hackers associated with “Scattered Spider” tactics have expanded their targeting to the aviation and transportation industries after previously attacking insurance and retail sectors These threat actors have employed a sector-by-sector approach, initially targeting retail companies, such as M&S and Co-op, in the United Kingdom and the United States and subsequently shifting their focus to insurance companies. While the threat actors were not officially named as responsible for insurance sector attacks at first, recent incidents have impacted Aflac, Erie Insurance, and Philadelphia Insurance Companies. Hackers target the aviation industry On June 12, Canada’s second-largest airline, WestJet, suffered a cyberattack that briefly disrupted the company’s internal…

Logan Lembke // Kerberos authentication can be daunting but is an important protocol to understand for any IT professional, and especially important in the field of information security. While you may not hear about Kerberos often, you probably have heard about its largest implementation: Windows Active Directory. Since Windows 2000, Kerberos has been the default network authentication protocol for users within a domain. In practice, Kerberos allows network authentication to take place without putting the user’s password, or a hash of that password onto the network. In doing so, it protects users against a vast array of snooping attacks that…

Attackers are more inclined to “log in rather than break in,” using stolen credentials, legitimate tools, and native access to stealthily blend into their target’s environment, according to Bitdefender’s 2025 Cybersecurity Assessment Report. Attack surface reduction is a top priority 68% of security leaders are focusing on reducing the number of tools and applications running in their environments. Why? Because every unused admin account, unnecessary app, or extra permission is a potential doorway for attackers, and a place for them to hide once they’re in. By turning off what’s not needed, organizations give attackers fewer options. Today’s threats often come…

Every time there’s a natural or manmade disaster that takes medical equipment offline, cuts connectivity to emergency services and loved ones, or shuts down access to ATMs, network engineers are at the center of the heroic efforts required to restore availability and uptime. (Though, in truth, network engineers deal with chaos every day.) The network is what keeps businesses up and running, so it must be resilient. However, several factors contribute to the complexity of networks and the difficulty of enabling business continuity. AI compounds compute demands. Nearly half of technology leaders say that AI is fully integrated into their…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday released two industrial control systems (ICS) advisories highlighting hardware vulnerabilities in Mitsubishi Electric and TrendMakers equipment, deployed in the commercial facilities sector. The alerts detail current security flaws, potential exploits, and mitigation steps. CISA urged users and administrators to review the advisories for technical specifics and recommended defenses. In an advisory, CISA revealed that Mitsubishi Electric air conditioning systems have a critical vulnerability caused by missing authentication for key functions. “Successful exploitation of this vulnerability could allow an attacker to control the air conditioning system.” Mihály Csonka reported this vulnerability…

As more organizations adopt DMARC and implement domain-based protections, a new threat vector has moved into focus: brand impersonation. Attackers are registering domains that closely resemble legitimate brands, using them to host phishing sites, send deceptive emails, and mislead users with cloned login pages and familiar visual assets. In 2024, over 30,000 lookalike domains were identified impersonating major global brands, with a third of those confirmed as actively malicious. These campaigns are rarely technically sophisticated. Instead, they rely on the nuances of trust: a name that appears familiar, a logo in the right place, or an email sent from a…

Carrie Roberts & Chevy Swanson // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. How do we make sure people open up our malicious files and execute them? We simply let Microsoft work for years and years to gain people’s trust, then we throw some dangerous macros into a powerpoint and people will actually have a smile on their face as…

generate tons of words and responses based on general knowledge, but what happens when we need answers requiring accurate and specific knowledge? Solely generative models frequently struggle to provide answers on domain specific questions for a bunch of reasons; maybe the data they were trained on are now outdated, maybe what we are asking for is really specific and specialized, maybe we want responses that take into account personal or corporate data that just aren’t public… 🤷‍♀️ the list goes on. So, how can we leverage generative AI while keeping our responses accurate, relevant, and down-to-earth? A good answer to this question…