Author: HackWatchit

Carrie Roberts//* Have you found yourself trying to Grep through PowerView output, or any PowerShell output for that matter, and find that it returns no results for text you know is in the file? PowerShell default output encoding is UTF-16, causing unexpected Grep results. The fix is easy, just use the built-in Linux/OS X tool iconv as follows: Make a mental note and log this away for the next time Grep is making you scratch your head!   *Carrie is one of our favorite BHIS blog post guests!

DragonForce operator chained SimpleHelp flaws to target an MSP and its customers Pierluigi Paganini May 27, 2025 Sophos warns that a DragonForce ransomware operator chained three vulnerabilities in SimpleHelp to target a managed service provider. Sophos researchers reported that a DragonForce ransomware operator exploited three chained vulnerabilities in SimpleHelp software to attack a managed service provider. SimpleHelp is a remote support and access software designed for IT professionals and support teams. It enables technicians to remotely connect to and control computers for troubleshooting, maintenance, and support purposes. Sophos states that DragonForce ransomware operators chained the three vulnerabilities, tracked as CVE-2024-57727, CVE-2024-57728,…

to tune hyperparamters of deep learning models (Keras Sequential model), in comparison with a traditional approach — Grid Search. Bayesian Optimization Bayesian Optimization is a sequential design strategy for global optimization of black-box functions. It is particularly well-suited for functions that are expensive to evaluate, lack an analytical form, or have unknown derivatives.In the context of hyperparameter optimization, the unknown function can be: an objective function, accuracy value for a training or validation set, loss value for a training or validation set, entropy gained or lost, AUC for ROC curves, A/B test results, computation cost per epoch, model size, reward amount for…

Anthropic has begun rolling out voice mode in beta for its artificial intelligence (AI) assistant, Claude. “Try starting a voice conversation and asking Claude to summarize your calendar or search your docs,” the company said when announcing the feature in a Tuesday (May 27) post on X. Voice mode in beta is available in English and is coming to all the company’s subscription plans “in the next few weeks,” Anthropic added in another post on X. AI voice features promise more natural and personalized interactions, PYMNTS reported in September. “This isn’t just about convenience — it’s about creating real, human…

In brief Blockstream CEO Adam Back says Trump’s presidency is accelerating government interest in Bitcoin by decades. Back, a veteran cypherpunk, views the shift as a departure from Bitcoin’s anti-government roots. While welcoming the momentum, Back warns the political embrace of crypto complicates investor confidence. Although U.S. President Donald Trump isn’t slated to attend this year’s Bitcoin conference in Las Vegas, his presence is being felt, with scheduled speakers like Vice President JD Vance and regulatory tailwinds that everyone seems excited to discuss.For Blockstream CEO and British cryptographer Adam Back, the dynamic feels like a far cry from Bitcoin’s early…

MixMode Threat Research MixMode Threat Research is a dedicated contributor to MixMode.ai’s blog, offering insights into the latest advancements and trends in cybersecurity. Their posts analyze emerging threats and deliver actionable intelligence for proactive digital defense. The Cookie-Bite attack is an advanced evolution of Pass-the-Cookie exploits. This tactic bypasses Multi-Factor Authentication (MFA) by leveraging stolen authentication cookies—such as Azure Entra ID’s ESTSAUTH and ESTSAUTHPERSISTENT—to impersonate users. By hijacking active sessions without needing credentials or MFA, attackers gain access to cloud services like Microsoft 365 and Azure, posing serious risks to enterprise environments. This attack has become increasingly accessible via darknet tools like EvilProxy and has already been used in high-profile…

The DragonForce ransomware operation successfully breached a managed service provider and used its SimpleHelp remote monitoring and management (RMM) platform to steal data and deploy encryptors on downstream customers’ systems. Sophos was brought in to investigate the attack and believe the threat actors exploited a chain of older SimpleHelp vulnerabilities tracked as CVE-2024-57727, CVE-2024-57728, and CVE-2024-57726 to breach the system. SimpleHelp is a commercial remote support and access tool commonly used by MSPs to manage systems and deploy software across customer networks.  The report by Sophos says that the threat actors first used SimpleHelp to perform reconnaissance on customer systems, such as…

The International Society of Automation (ISA), a professional society for automation, announced that the Utilities Technology Council (UTC) has officially joined ISASecure, the globally recognized certification program. The move assures the cybersecurity of industrial automation control systems by validating conformance to the ISA/IEC 62443 series of standards. UTC is a global association focused on the intersection of telecommunications and utility infrastructure. Through advocacy, education and collaboration, it works to create a favorable business, regulatory and technological environment for organizations that own, manage or provide critical utility telecommunications systems. The new partnership between ISASecure and UTC reinforces their strong mutual commitment…

We’re excited to share that Check Point is acquiring Veriti, the first to introduce preemptive exposure management which automatically remediates threat exposures and prevents threat across complex multi-vendor estates.  In the era of hyperconnectivity and AI, reactive security is too slow  AI has brought cyber security to a tipping point, enabling the launch of attacks at scale. At the same time, enterprises are hyperconnected, with assets spread across clouds, datacenters, and endpoints — vastly expanding their attack surface. Traditional reactive security, based on detection and response, is too slow. Veriti continuously identifies, prioritizes, and remediates risk across your multi-vendor environment…