Author: HackWatchit

Could Bitcoin-backed media revolutionize the way we consume financial news? Roxom Global certainly believes so. Having recently raised $17.9 million, Roxom Global is preparing a BTC-denominated securities exchange and launching RoxomTV, a 24-hour media network fully supported by Bitcoin. Roxom Global: Bridging Bitcoin and Finance Roxom Global has garnered significant attention following its latest funding round. The project attracted $7.9 million from prominent investors including Draper Associates, Borderless Capital, ego death, and Kingsway Capital. Roxom is developing an exchange where trading instruments such as futures, spot markets, and synthetic products are all priced and settled exclusively in Bitcoin. “Our aim…

Akamai researchers have identified a significant privilege escalation vulnerability in Windows Server 2025, termed “BadSuccessor.” This flaw exploits the newly introduced delegated Managed Service Accounts (dMSAs) feature, allowing attackers to impersonate any Active Directory (AD) user, including domain administrators, without altering existing accounts or group memberships. Key Details: Affected Feature: Delegated Managed Service Accounts (dMSAs) in Windows Server 2025. Attack Mechanism: By creating a dMSA and setting specific attributes (msDS-ManagedAccountPrecededByLink and msDS-DelegatedMSAState), an attacker can simulate a migration from any existing user account. The Key Distribution Center (KDC) then grants the dMSA the privileges of the targeted account, effectively allowing…

In this article, I will introduce you to hierarchical Bayesian (HB) modelling, a flexible approach to automatically combine the results of multiple sub-models. This method enables estimation of individual-level effects by optimally combining information across different groupings of data through Bayesian updating. This is particularly valuable when individual units have limited observations but share common characteristics/behaviors with other units. The following sections will introduce the concept, implementation, and alternative use cases for this method. The Problem with Traditional Approaches As an application, imagine that we’re a large grocery store trying to maximize product-level revenue by setting prices. We would need…

Outsourcing cybersecurity can be a practical and affordable option. It allows small businesses to get the protection they need without straining their budgets, freeing up time and resources to focus on core operations. 76% of SMBs lack the in-house skills to properly address security issues, increasing demand for the expertise and services of MSPs, and 78% are concerned that a severe cyberattack could drive them out of operation, according to ConnectWise. What you can outsource SMBs can outsource a range of cybersecurity functions to external experts. Common services include: Managed security service providers (MSSPs): Handle tasks such as threat monitoring,…

Author, How-To, John Strand, Webcasts Cubicles and Compromises, Dungeons & Dragons, Incident Response, IR, Table Top, webcast John Strand// Thanks for joining us for our Cubicles and Compromises webcast! We also have a recording available soon! In the meantime, here’s a blog post explanation: Dungeons & Dragons, Meet Cubicles & Compromises And, here you’ll find the printable version: https://www.blackhillsinfosec.com/wp-content/uploads/2019/09/CubiclesandCompromisesPrintable.pdf If you try this, let us know how it goes! Want to level up your skills and learn more straight from John himself?You can check out his classes below! SOC Core Skills Active Defense & Cyber Deception Getting Started in Security with…

Operation Endgame, mounted by law enforcement and judicial authorities from the US, Canada and the EU, continues to deliver positive results by disrupting the DanaBot botnet and indicting the leaders of both the DanaBot and Qakbot Malware-as-a-Service operations. Operation Endgame 2.0 Coordinated by Europol and Eurojust, the operation was first made public a year ago, when it disrupted the global infrastructure used to deliver malware droppers and trojans – SystemBC, Bumblebee, SmokeLoader, IcedID, and Pikabot – and led to the arrest of a number of suspects involved in the distribution operations. As Shadowserver Foundation’s CEO Piotr Kijewski recently noted, the…

OpenAI says Operator Agent now uses the o3 model, which means it’s now significantly better at reasoning capabilities. For those unaware, Operator, which is still in research preview, allows users to delegate web tasks to the AI agent. You can use it to automate repetitive tasks, such as filling forms and ordering products. Operator isn’t exactly new and has been around since January 2025, but only those who pay for a $200 Pro and Enterprise subscription have access to it. I recently reported that OpenAI is planning to improve Operator and turn it into a “very useful tool.” While we are…

John Strand// Here’s a live demo of John’s recent blog post that talked about gamifying your table top Dungeon and Dragons style. Join John, Kent, Jordan and Sierra as they demo this fun way to make sure your team is trained and ready with procedures in place to handle future incidents.   Printable version of Cubicles and Compromises available here: https://www.blackhillsinfosec.com/cubicles-compromises-printable/ Slides available here: https://www.dropbox.com/s/y9q0yf1ufiiwq4u/Cubicles%20and%20Compromises.pdf?dl=0 Want to level up your skills and learn more straight from John himself?You can check out his classes below! SOC Core Skills Active Defense & Cyber Deception Getting Started in Security with BHIS and MITRE ATT&CK Introduction…

Akamai researchers reveal a critical flaw in Windows Server 2025 dMSA feature that allows attackers to compromise any Active Directory user. Learn about the BadSuccessor attack and mitigation steps. A significant security flaw has been uncovered in Windows Server 2025, posing a serious threat to organizations utilizing Active Directory (AD). Discovered by Akamai researcher Yuval Gordon, this privilege escalation vulnerability could allow malicious actors to gain full control over any user account within an organization’s AD, even with minimal initial access. The BadSuccessor Attack Explained According to Akamai’s research, shared exclusively with Hackread.com, the vulnerability exploits a new feature introduced…