Author: HackWatchit

OpenAI bans ChatGPT accounts linked to Russian, Chinese cyber ops Pierluigi Paganini June 09, 2025 OpenAI banned ChatGPT accounts tied to Russian and Chinese hackers using the tool for malware, social media abuse, and U.S. satellite tech research. OpenAI banned ChatGPT accounts that were used by Russian-speaking threat actors and two Chinese nation-state actors. The blocked accounts were used to assist malware development, social media automation, and research about U.S. satellite communications technologies, among other malicious activities. The AI firm banned a set of accounts used by a Russian-speaking group as part of a cyber operation tracked as ScopeCreep. The…

There’s rarely any real justification for letting a vulnerability with a 10.0 rating go unchecked, though some organizations do just that with alarming frequency. But one such bug in the Out-of-Band Access Point (AP) Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) bears scrutiny and implementing a quick fix. If not addressed, unauthenticated, remote attackers could upload arbitrary files to systems affected by a hard-coded JSON Web Token, Cisco says. All an attacker would need to do to successfully exploit is send crafted HTTPS requests to the AP image download interface. Once done, the miscreants could…

John Strand // In the last webcast we covered initial Windows Live Forensics (see the recording here), in this one we play with memory from a compromised system. We cover the tools to dump memory from a system and some of the basic tools to look at the memory of a system which may be compromised. (Apparently we didn’t pray hard enough to the demo gods and there are a few snafus but… hey, we’re real people too!) Want the slides? Check out www.tinyurl.com/504extra2 Available live/virtual and on-demand

The threat landscape in the bioeconomy is different from what most CISOs are used to. It includes traditional risks like data breaches, but the consequences are more complex. A compromise of genomic databases, for example, does not just expose personal health data. It can also leak proprietary genetic sequences that represent years of research and investment. These are not just privacy violations; they are breaches that can cripple a business’s future R&D pipeline. One example is the breach at 23andMe, where attackers accessed genetic data of millions of users through credential stuffing. Cyberbiosecurity risks go beyond data loss The risks…

Governor Greg Abbott signed House Bill 150 into law to create the Texas Cyber Command, the largest state-based cybersecurity department in America, during a bill signing ceremony at The University of Texas at San Antonio (UTSA), according to a press release on 3 June. Passed during the 89th Regular Legislative Session, the Texas Cyber Command will leverage the cybersecurity expertise and resources of state, local, and federal partners in San Antonio to protect Texans against cyber threats. “Our state is under constant attack by cyber criminals, attacks that occur thousands of times every single second of every single day,” said…

OpenAI is planning to ship an update to ChatGPT that will turn on the new o3 Pro model, which has more compute to think harder. ChatGPT currently offers o4-mini, o4-mini-high, GPT-4.5, GPT-4.1, GPT-4.1-mini, and o3 for $20 Plus subscribers. ChatGPT $200 Pro subscription has all of those plus an o1 Pro model, which offers more compute to think harder. o1 Pro is powerful, but feels outdated since we have a better o3 model in the lineup. However, this could change soon with the o3 Pro model. o3-pro in ChatGPT model selector As hinted at an event in New Delhi, OpenAI will…

Sally Vandeven & the BHIS Team // I was recently on an assessment where I was able to grab all the password hashes from the domain controller. When I extracted the hashes and […] The post Go Ahead, Make Our Day appeared first on Black Hills Information Security, Inc..

Security Affairs newsletter Round 527 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini June 08, 2025 A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. International Press – Newsletter Cybercrime Websites selling hacking tools to cybercriminals seized  Alleged Conti, TrickBot Gang Leader Unmasked   Key service for malware developers taken offline Hospitals in Maine, New Hampshire limit services after cyberattack on Catholic health org  U.S. Government seizes approximately 145 criminal marketplace…

In this Help Net Security interview, Renana Friedlich-Barsky, EVP and CISO at LPL Financial, discusses how threat actors are targeting high-net-worth clients and exploiting digital touchpoints in wealth management. She explains why firms must embed security from the start to protect sensitive assets and ensure seamless, secure client experiences. How are threat actors evolving their tactics to target high-net-worth clients or exploit digital touchpoints in wealth management platforms? Threat actors are becoming more targeted and sophisticated in their attempts to exploit wealth management platforms. High-net-worth clients are especially attractive targets due to the value of their assets and personal information.…