Author: HackWatchit

The Federal Bureau of Investigation (FBI) has issued a Public Service Announcement to warn the public about cyber criminals exploiting Internet of Things (IoT) devices connected to home networks to conduct criminal activity using the BADBOX 2.0 botnet. Cyber criminals gain unauthorized access to home networks through compromised IoT devices, such as TV streaming devices, digital projectors, aftermarket vehicle infotainment systems, digital picture frames and other products. Most of the infected devices were manufactured in China. Cyber criminals gain unauthorized access to home networks by either configuring the product with malicious software prior to the users purchase or infecting the device…

Can Smart Contracts Truly Trust Their Data? Smart contracts operate on the principle of trustless execution, yet they often rely on external data sources that may not be verifiable. This reliance raises concerns about the integrity of the data feeding into decentralized applications (dApps). The launch of Space and Time’s mainnet introduces a solution aimed at addressing this challenge by enabling smart contracts to access and verify data through cryptographic proofs. Understanding Space and Time’s Approach Space and Time is a decentralized data warehouse that integrates zero-knowledge (ZK) proofs to ensure the integrity of data used by smart contracts. By…

Phishing attackers abuse TLDs like .li, .es, and .dev to hide redirects, steal credentials, and bypass detection. See top domains flagged by ANY.RUN in 2025. Some phishing sites don’t need fancy tricks, just the right domain name. And you won’t always spot it until it’s too late. Hackers have become masters at abusing certain Top-Level Domains (TLDs), like .com, .ru, or .dev, to host phishing pages, fake login portals, or malware redirects. While many TLDs are used for legitimate purposes, others are repeatedly exploited to trick users into handing over sensitive information. Recent sandbox data from ANY.RUN highlights the 20…

Scott Schober, Cyber Expert, Author of “Hacked Again,” and CEO of Berkeley Varitronics Systems, sits down with host David Braue to discuss the ransomware attack that recently hit Marks & Spencer.  *** This is a Security Bloggers Network syndicated blog from Cimcor Blog authored by Lauren Yacono. Read the original post at: https://www.cimcor.com/blog/marks-spencer-hit-by-ransomware-attack

Ivanti has released security updates to fix three high-severity hardcoded key vulnerabilities in the company’s Workspace Control (IWC) solution. IWC helps enterprise admins manage desktops and applications, acting as an intermediary between the operating system and users and regulating access and workspace configuration. It provides centralized control over user workspaces and dynamically configures desktops, applications, and user settings based on policies and user roles. All three security bugs are caused by the use of a hard-coded, unchangeable cryptographic key, and they can lead to privilege escalation and system compromise following successful exploitation and depending on the account targeted during a…

This webinar is designed for leadership and management professionals looking to enhance their organization’s security posture in the cloud. The authors explore CIS Hardened Images: how they work, the security benefits they offer, and why they’re especially valuable for public sector organizations. Throughout the discussion, you’ll gain a clear understanding of how these pre-configured security solutions align with the CIS Benchmarks to help mitigate risks and ensure compliance with critical frameworks. The webinar breaks down the public cloud’s shared responsibility model and what it means for your security strategy. Plus, you’ll discover how CIS Hardened Images provide a cost-effective, reliable…

Brian Fehrman // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. As described in my last blog post, Powershell Without Powershell – How To Bypass Application Whitelisting, Environment Restrictions & AV (sheeesh…it’s been a bit!), we are seeing more environments in which the execution of PowerShell Scripts are being detected or prevented. One way around those restrictions is to use a C# wrapper…

China-linked threat actor targeted +70 orgs worldwide, SentinelOne warns Pierluigi Paganini June 10, 2025 China-linked threat actor targeted over 70 global organizations, including governments and media, in cyber-espionage attacks from July 2024 to March 2025. In April 2025, cybersecurity firm SentinelOne warned that a China-linked threat actor, tracked as PurpleHaze, attempted to conduct reconnaissance on its infrastructure and high-value clients. The activity suggests targeted cyberespionage efforts aimed at gathering information for potential future attacks. SentinelOne first identified PurpleHaze’s activity during a 2024 intrusions into a former hardware logistics provider for its employees. Over several months, SentinelLABS observed this group targeting…

The Defense Department feels better than ever about the future of the Cybersecurity Maturity Model Certification program. DoD is close to solving two big obstacles to get CMMC off the ground more than six years after first introducing the data security program. After finalizing the first rule related to CMMC last summer, which established the formal program, DoD now believes its path is clear to get the second regulation finalized in the coming months. Stacy Bostjanick is the DoD’s chief of the Defense Industrial Base Cybersecurity in the CIO’s office. Stacy Bostjanick, DoD’s chief of the Defense Industrial Base Cybersecurity…