Author: HackWatchit
Sierra Ward with help from all // Wow, another year, another Christmas and another chance to be totally stumped by what to get you favorite InfoSecker. But fear not! We are here with another riveting installment of the BHIS Christmas Gift Guide/Our Tester Wish List! This is divided by price point more than topically… It’s a mish-mash. Wondering what was on the list last year? Here that. Stocking Stuffers Cyber Attribution Dice – $10 (different colors available) https://www.etsy.com/listing/508651937/cyber-attribution-dice-set-pinkblack One of my favorite things on this list…. Remember that threat intelligence feed that John hates soooo much? Well we found a better solution,…
China-linked APT UNC5221 started exploiting Ivanti EPMM flaws shortly after their disclosure Pierluigi Paganini May 26, 2025 China-linked APT exploit Ivanti EPMM flaws to target critical sectors across Europe, North America, and Asia-Pacific, according to EclecticIQ. Researchers from EclecticIQ observed a China-linked APT group that chained two Ivanti EPMM flaws, tracked as CVE-2025-4427 and CVE-2025-4428, in attacks against organizations in Europe, North America, and Asia-Pacific. Below is the description of the flaws: CVE-2025-4427 (CVSS score: 5.3) – An authentication bypass in Endpoint Manager Mobile allowing attackers to access protected resources without proper credentials. CVE-2025-4428 (CVSS score: 7.2) – A remote code execution vulnerability in Endpoint…
NIST has introduced a new way to estimate which software vulnerabilities have likely been exploited, and it’s calling on the cybersecurity community to help improve and validate the method. The new metric, “Likely Exploited Vulnerabilities” (LEV), aims to close a key gap in vulnerability management: identifying which of the thousands of reported flaws each year are actually being used in real-world attacks. Organizations typically rely on two main tools for this: the Exploit Prediction Scoring System (EPSS), which estimates the chance of future exploitation, and Known Exploited Vulnerability (KEV) lists like the one maintained by CISA. But both have limits.…
Can Visualizing Wallet Behavior Make DeFi Safer? Bubblemaps Thinks It Can Decentralized finance thrives on openness, yet visibility does not always mean clarity. While blockchains are public, interpreting wallet behavior, token flows, and market manipulation remains difficult for most users. Bubblemaps believes visualization can bridge this gap. Bubblemaps launched V2 support for BNB Chain, enabling users to analyze wallet clusters, token behavior, and ecosystem trends through interactive, visual maps. This makes BNB Chain the sixth network added to Bubblemaps’ analytics suite, joining Ethereum, Solana, Avalanche, Arbitrum, and Polygon. “BNB Chain means a lot to us. It’s where we discovered DeFi…
The U.S. National Telecommunications and Information Administration (NTIA) supports efforts to enhance submarine cable security but urges the Federal Communications Commission (FCC) to avoid imposing redundant licensing requirements already addressed through agreements with the Committee for the Assessment of Foreign Participation in the nation’s telecommunications services sector. This comes as the agency emphasizes the critical national security need to preserve the competitiveness of the U.S. technology and telecommunications sectors, especially against strategic competitors such as the People’s Republic of China. NTIA also concurs with the FCC’s assessment that the national security and law enforcement landscape for communications networks has changed…
Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. This week, we look back on some highlights from the first couple of months of posts, including the broad view exposure management provides, business impact and getting to a single pane of glass. You can read the entire Exposure Management Academy series here. Since we started the Exposure Management Academy in March, we’ve covered a range of topics with contributions from many of Tenable’s industry experts. In this post, we look at a few of the highlights, focusing…
Author, InfoSec 201, John Strand, News, Webcasts ACDC, ACDC Active Defense Law, Active Defense, webcast John Strand// In this webcast John talks about the new ACDC law and what it means exactly. There has been quite a bit of anger and great GIFs about hacking back and the law so he thought it would be a good idea to actually walk through it and point out a few of its pros and cons. Slides available here: https://www.dropbox.com/s/zxkap6an8e65gh3/ACDC%20Law.pdf?dl=0 Want to know when our next webcast is? Sign up here: http://blackhillsinfosec.us15.list-manage.com/subscribe?u=e12efe2af6573cc76c90fc019&id=b7b017ed3a Want to level up your skills and learn more straight from…
I shouldn’t have to write this article. In an ideal world, that is. But we’re not living in an ideal world, so I do have to write it. If you’re a woman, research suggests that you’re actively sabotaging your chances of landing jobs you deserve. To make things worse, gender expectations still influence how candidates are perceived. A study of graduating MBA students led by Linda Babcock found that 57% of men negotiate their starting salaries, compared to just 7% of women. Another study by Hannah Riley Bowles, Linda Babcock, and Kathleen McGinn suggested that women who negotiated assertively were…
To commemorate the 250th anniversaries of the Army, Navy and Marine Corps, the U.S. Postal Service released a set of three new commemorative stamps that recognize each service’s long-standing dedication to defending the nation. The three stamps, each featuring the name of the military service, the service seal and the inscriptions “250 Years of Service,” “Since 1775,” and “Forever/USA,” were revealed during a ceremony today at Freedom Plaza in Washington. Jeffery A. Adams, USPS corporate communications vice president and Army veteran, spoke about the importance of service during the event. “Service isn’t about a uniform. It’s about impact. It’s about…