Author: HackWatchit

Argentina’s Anti-Corruption Office has determined that President Javier Milei did not violate any ethics laws when he promoted the Solana-based LIBRA memecoin in February.In a resolution issued on Friday, the office declared that Milei’s Feb. 14 X post constituted a personal statement rather than an official announcement as a public servant. Therefore, Milei’s post did not result in any ethics violations, the document signed by Alejandro Melik, head of the Anti-Corruption Office, stated.The Anti-Corruption Office is a decentralized agency that reports to the Argentine Ministry of Justice. Its chief, Melik, was appointed by the Milei administration in December 2023.The office…

What is the Critical Core of NHI Management? Non-Human Identities (NHIs), the machine identities used in cybersecurity, play an essential role in maintaining an organization’s security status. Created by combining a “Secret” (an encrypted password, token, or key) and the permissions granted to that Secret by a server, they form the backbone of an organization’s security infrastructure. Yet, managing NHIs and their secrets, a vital process, involves securing both the identities and their access credentials while monitoring their behavior. A comprehensive understanding of the strategic importance of NHI is crucial, particularly when addressing the various security gaps that can stem…

Sally Vandeven // Back in November Beau Bullock wrote a blog post describing how his awesome PowerShell tool MailSniper can sometimes bypass OWA portals to get mail via EWS if it has not been configured with the same two-factor authentication (2FA) protection. I used that technique on a recent test and was able to abuse the situation even further. Here is my story… I did a password spray on an external OWA portal and discovered that the password for the user who we will call Jane Doe was Spring2017. But I was not able to login to Jane’s account because…

President Donald Trump’s nominee for national cyber director said he would lead the Office of the National Cyber Director with “focus and direction,” while also backing a push from lawmakers and industry to streamline federal cyber regulations. Sean Cairncross, former CEO of the Millennium Challenge Corporation and former chief operating officer for the Republican National Committee, told the Senate Homeland Security and Governmental Affairs Committee today that “form must follow function” at the Office of the National Cyber Director. “If confirmed, I would assume this role with the following approach: First, if ONCD tries to do everything, it will be…

The Qilin ransomware operation has recently joined attacks exploiting two Fortinet vulnerabilities that allow bypassing authentication on vulnerable devices and executing malicious code remotely. Qilin (also tracked as Phantom Mantis) surfaced in August 2022 as a Ransomware-as-a-Service (RaaS) operation under the “Agenda” name and has since claimed responsibility for over 310 victims on its dark web leak site. Its victim list also includes high-profile organizations, such as automotive giant Yangfeng, publishing giant Lee Enterprises, Australia’s Court Services Victoria, and pathology services provider Synnovis. The Synnovis incident impacted several major NHS hospitals in London, which forced them to cancel hundreds of…

A financially motivated group of hackers known as UNC6040 is using a simple but effective tactic to breach enterprise environments: picking up the phone and pretending to be IT support, simply called voice phishing (Vishing). According to a new report from Google’s Threat Intelligence Group (GTIG), this actor has been impersonating internal tech staff in phone-based social engineering attacks. Their goal is to trick employees, mostly in English-speaking branches of multinational companies, into granting access to sensitive systems, particularly Salesforce, a widely used customer relationship management (CRM) platform. How the Scam Works UNC6040 doesn’t rely on exploits or security vulnerabilities.…

Sierra Ward // We’re getting to that stage of life where we have to make some hard decisions regarding our parents.  How do we help them through sickness? When and how do we know when it might be time to convince them to reconsider driving? And when will it be time for them to say goodbye to the privilege of managing sensitive data online.   I recently had the tough conversation about password management with my own parents – as predicted, it was almost harder than telling them I was taking away the car. To be fair, I’ve been having…

Over 950K weekly downloads at risk in ongoing supply chain attack on Gluestack packages  |  SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 48  |  Security Affairs newsletter Round 527 by Pierluigi Paganini – INTERNATIONAL EDITION  |  Experts found 4 billion user records online, the largest known leak of Chinese personal data from a single source  |  Attackers exploit Fortinet flaws to deploy Qilin ransomware  |  Russia-linked threat actors targets Ukraine with PathWiper wiper  |  U.S. Offers $10M bounty for info on RedLine malware creator and state hackers  |  Play ransomware group hit 900 organizations since 2022  |  U.S. CISA adds Google Chromium…

Cyber-physical systems (CPS) protection company Claroty has announced new capabilities in its SaaS-based Claroty xDome platform that provide organizations with an impact-centric view of their CPS environment.  The new additions, Device Purpose and Risk Benchmarking, allow users to see how the overall risk of an environment is affected by the processes involved in a device’s use – as production lines, building floors, hospital wings, and more – and prioritize risk reduction efforts based on potential impact to business outcomes, while bridging the gap between CPS personnel and other business units. According to Gartner, “Organizations are becoming aware of their blind…