Author: HackWatchit
Unknown attackers have trojanized SonicWall’s SSL-VPN NetExtender application, the company has warned on Monday, and have been tricking users into downloading it from a lookalike site(s?). The trojanized SonicWall NetExtender installer SonicWall NetExtender is an SSL‑VPN client used by companies to give remote employees secure access to their internal networks. SonicWall does not mention how prospective victims were lured to the lookalike sites impersonating the company and offering the compromised version of NetExtender, but said that the application was digitally signed by “CITYLIGHT MEDIA PRIVATE LIMITED.” The threat actors modified two component files of the legitimate NetExtender installer: NeService.exe (with an…
The Canadian Centre for Cyber Security and the U.S. Federal Bureau of Investigation issued a new warning about ongoing cyber activity by Salt Typhoon, a group linked to Chinese state-sponsored operations. The Cyber Centre confirmed that Canadian telecommunications companies are currently being targeted. At least three network devices belonging to one telecom provider were compromised in mid-February 2025. The attackers, almost certainly linked to the People’s Republic of China (PRC), exploited CVE-2023-20198 to extract running configuration files from the devices. They altered at least one file to establish a GRE tunnel, allowing them to siphon network traffic. Separate investigations by…
Writing cover letters is nobody’s favorite part of the job hunt. Cover letters feel outdated, hard to write, and you’re never quite sure if anyone actually reads them. So a lot of people either skip them or treat them like a chore, copy-pasting a few lines, repeating their resume, and hoping for the best. But here’s the thing: hiring managers still use them. And if done right, a great cover letter can actually give you an edge. It’s your chance to stand out by connecting the dots between who you are, what the company needs, and why you’re the best…
China-linked APT Salt Typhoon targets Canadian Telecom companies Pierluigi Paganini June 24, 2025 Canada and FBI warn of China-linked APT Salt Typhoon targeting Canadian telecom firms in ongoing cyber espionage operations. The Canadian Centre for Cyber Security and the FBI warn that China-linked APT cyber espionage group Salt Typhoon, is targeting Canadian telecom firms in espionage attacks. The Salt Typhoon hacking campaign, active for 1–2 years, has targeted telecommunications providers in several dozen countries, according to a U.S. official. In February 2025, Recorded Future’s Insikt Group reported that China-linked APT group Salt Typhoon was still targeting telecommunications providers worldwide, and the threat actors had…
Lawrence Hoffman // As I previously mentioned I’m on vacation this week and next. As I like to go for long cross-country drives I’ve not had much time to keep […] The post Lawrence’s List 070116 appeared first on Black Hills Information Security, Inc..
A practical deep dive into declarative AI programming The post Programming, Not Prompting: A Hands-On Guide to DSPy appeared first on Towards Data Science.
Judge orders OPM to submit DOGE access report A federal judge has ordered OPM to detail the level of access granted to “DOGE agents,” as well as whether they received proper training and vetting. Justin Doubleday@jdoubledayWFED June 23, 2025 7:15 pm 3 min read A federal judge has ordered a sweeping review into the access that Department of Government Efficiency, or DOGE, officials have gained into Office of Personnel Management’s IT systems. In a preliminary injunction issued Friday, District Judge Denise Cote directed OPM to submit a report within two weeks that describes how the agency has ensured compliance with…
BREAKING: The BBC is now reporting new missile launches from Iran at 08.30 BST, potentially breaking the ceasefire just moments after Israel’s acceptance. Bitcoin returned above $105,000 early Monday after Israel formally accepted a ceasefire proposal brokered by the United States, capping a volatile 48-hour period that saw rapid escalations in the Iran-Israel conflict and renewed market exposure to geopolitical risk.Per the BBC, the ceasefire was declared “in effect” by President Donald Trump around 06:08 BST on June 24, following a final exchange of missile strikes between Tehran and Jerusalem.Iran confirmed it had fired a final volley of rockets toward Israeli…
Security teams are all too familiar with the risk mitigation drill: discover risky SaaS, evaluate it, contain it if necessary, and close the loop. But what happens when part of that loop relies on someone replying to an email, noticing a Slack message, or taking action outside of their normal workflow? That’s often where SaaS security workflows break down. The biggest problem we’ve seen isn’t a lack of automation; it’s a breakdown in follow-through. Tasks fall through the cracks. End-user justifications get missed. Risk reviews stall. And often, it’s not because teams aren’t doing their jobs, it’s because they’re being…