Author: HackWatchit
As Bloomberg News reported Thursday (June 12), the companies have signed an agreement that lets them jointly invest in growing companies and the assets those companies originate, like consumer loans. The report noted that private credit outfits have been seeking ways to carve out a greater slice of the $5.2 trillion asset-backed finance market, which involves debt backed by contractual cash flows stemming from defined pools of assets, such as mortgages or auto loans. According to the report, the agreement lets Carlyle and Citi invest side-by-side in these startups, whether that’s through private debt or equity investments, and one day…
Attackers are using the TeamFiltration pentesting framework to brute-force their way into Microsoft Entra ID (formerly Azure AD) accounts, Proofpoint researchers have discovered. “Proofpoint’s research indicates that while simulated intrusions using TeamFiltration date back nearly to the tool’s initial release in 2021, there has recently been a surge in login attempts associated with its use,” they shared. “This increase in activity, attributed to UNK_SneakyStrike’s ongoing campaign, began in December 2024 and peaked in January 2025. So far, over 80,000 user accounts across roughly 100 cloud tenants [i.e., organizations] have been targeted, resulting in multiple account takeover instances.” How the attackers…
Check out Carrie’s demo of her DPAT, and if you missed her blog, check that out here. You can learn more from Carrie in her classes! Check them out here: Attack Emulation Tools: Atomic Red Team, CALDERA and More PowerShell for InfoSec Available live/virtual and on-demand!
SinoTrack GPS device flaws allow remote vehicle control and location tracking Pierluigi Paganini June 12, 2025 Two vulnerabilities in SinoTrack GPS devices can allow remote vehicle control and location tracking by attackers, US CISA warns. U.S. CISA warns of two vulnerabilities in SinoTrack GPS devices that remote attackers can exploit to access a vehicle’s device profile without permission. The researchers warn that potential exploitation could allow attackers to track its location or even cut power to the fuel pump, depending on the model. “Successful exploitation of these vulnerabilities could allow an attacker to access device profiles without authorization through the…
The spate of cyber attacks impacting the retail industry continues, with the latest victim being United Natural Foods, one of the USA’s largest wholesale distributors of healthy and specialty food.Unite Natural Foods (UNFI), which supplies organic produce to Whole Foods, Amazon, Target, and Walmart, amongst many others, revealed in a filing to the Securities and Exchange Commission, that after discovering unauthorised network activity on its network on June 5, it had “activated its incident response plan and implemented containment measures, including proactively taking certain systems offline.”The company said that it had “proactively taken some systems offline” while it investigated the…
What are we learning today? CoCoMix (Jihoon et al., 2025)¹ by Meta have made conceptual learning, i.e., learning concepts behind words instead of just predicting the next token a reality, making them remarkably steerable and interpretable. But a core question remains: even a conceptually brilliant model can struggle with nuanced or factual recall challenges after training, during actual deployment. You could ask a seemingly simple question like, “Earlier in our 2-million-token conversation, where did we discuss Pinocchio’s famously growing nose?” No matter how conceptually capable the LLM is, it cannot answer this simple question if the answer lies outside its context…
Cybersecurity firm Aim Labs has uncovered a serious new security problem, named EchoLeak, affecting Microsoft 365 (M365) Copilot, a popular AI assistant. This flaw is a zero-click vulnerability, meaning attackers can steal sensitive company information without user interaction. Aim Labs has shared details of this vulnerability and how it can be exploited with Microsoft’s security team, and so far, it is not aware of any customers being affected by this new threat. How “EchoLeak” Works: A New Kind of AI Attack For your information, M365 Copilot is a RAG-based chatbot, which means it gathers information from a user’s company environment…
Sierra Ward* // Normally I am hidden in the back rooms at BHIS, chipping away at 10 million marketing tasks. I show up occasionally in webcasts, lurking again in the shadows, answering your questions and talking with people on the chat. My most public appearances aren’t even “me” as I hammer away on social media, but behind the shield of BHIS (pun intended). This puts me often times in an interesting position because while I represent a pen testing company on social media I don’t in fact “… security, bro?” (The classic pentesting marketers quandary as referenced by Jason Blanchard in…
GitLab has released security updates to address multiple vulnerabilities in the company’s DevSecOps platform, including ones enabling attackers to take over accounts and inject malicious jobs in future pipelines. The company released GitLab Community and Enterprise versions 18.0.2, 17.11.4, and 17.10.8 to address these security flaws and urged all admins to upgrade immediately. “These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately,” the company warned. “GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action.” On Wednesday, GitLab…