Author: HackWatchit
13 Jun 2018 Podcasts Attack Tactics, Pentesting Podcast: Play in new window | DownloadSubscribe: Apple Podcasts | Spotify | Amazon Music | RSS This is the audio only version of John’s webcast about how we would attack your company during a pentest. Grab his slides here: https://blackhillsinformationsecurity.shootproof.com/gallery/6843799/ WEBCAST: Attack Tactics Part 2 PODCAST: Attack Tactics Part 2 Looking For Something?Browse by category Select Category Alyssa Snow (7) Ashley Knowles (1) Ashley Van Hoesen (1) Author (402) Backdoors & Breaches (7) Beau Bullock (32) Ben Bowman (4) Ben Burkhart (1) Blue Team (104) Blue Team Tools (42) Brian Fehrman (19) Brian Ireland (1) Brian King (20) Bronwen Aker (1) C2 (29) Cameron Cartier (3) Carrie Roberts (5) Chris Sullo (1)…
Everyone thinks the threat to Bitcoin is regulation.It’s not.It’s physics. The $1 Trillion Assumption Nobody Questions Bitcoin, and most of crypto, rests on one core cryptographic principle: You can’t derive a private key from a public one. At least, not in our lifetime.But quantum computing changes that. And the scariest part?We’re not ready.What Happens When the Wrong Country Gets There First? Now imagine this: Somewhere in Shanghai or Moscow, a military-backed lab achieves quantum supremacy. They don’t publish a paper. They deploy a weapon. And while the rest of us sleep:💥 Old Bitcoin wallets start draining 💥 Ethereum validators are…
Microsoft has confirmed that some Windows 10 and Windows 10 Enterprise LTSC 2021 systems will boot into BitLocker recovery after installing the May 2025 security updates. The BitLocker Windows security feature encrypts storage drives to prevent data theft, and Windows computers typically enter BitLocker recovery mode after events like TPM (Trusted Platform Module) updates or hardware changes to regain access to protected drives. Today, Microsoft confirmed the issue and said it’s investigating reports that “a small number” of Windows 10 PCs display BitLocker recovery screens after installing the KB5058379 update. “On affected devices, upon installing the update, Windows might fail…
Orca Security this week revealed it has acquired Opus to gain access to technologies capable of orchestrating artificial intelligence (AI) agents that are trained to automate a range of cybersecurity tasks.Opus previously has been employing that core capability to drive a vulnerability management platform that Orca Security now plans to sunset.Orca Security CEO Gil Geron said instead the AI agent orchestration technologies developed by Opus will be embedded with the cloud-native application protection platform (CNAPP) the company provides. Ultimately, the ability to orchestrate AI agents that are performing routine tasks on behalf of cybersecurity teams will prove to be a…
Cranium has launched Arena, an AI red teaming platform built to proactively test and secure AI systems across the full model and supply chain lifecycle. As artificial intelligence continues its rapid integration into enterprise infrastructure, so too does the urgency for scalable and intelligent risk management. Cranium Arena provides a hands-on environment where organizations can simulate real-world cyber threats—both automated and human-led—against their AI models before attackers strike. “AI systems today are as powerful as they are vulnerable,” said Jonathan Dambrot, CEO of Cranium. “Arena empowers security, compliance, and product teams to move beyond passive monitoring and take a proactive, continuous approach to…
Author, Blue Team, John Strand, Podcasts Attack Tactics, Blue Team, Defending Networks, Tools for the blue team, webcast Podcast: Play in new window | DownloadSubscribe: Apple Podcasts | Spotify | Amazon Music | RSS John talked about how we’d attack, here’s how you can defend against those attacks. Grab the slides here: https://blackhillsinformationsecurity.shootproof.com/gallery/6843799/ Want to level up your skills and learn more straight from John himself?You can check out his classes below! SOC Core Skills Active Defense & Cyber Deception Getting Started in Security with BHIS and MITRE ATT&CK Introduction to Pentesting Available live/virtual and on-demand
Countries like the United Kingdom, the United States, Australia, and Canada have established cyber laws that require organizations affected by ransomware attacks to report these incidents within a specific time frame. These mandatory reporting windows typically range between 48 to 72 hours, depending on the country’s regulatory framework. The aim is to ensure transparency, facilitate timely responses, and protect stakeholders from further harm.However, a recent study by Comparitech reveals a troubling trend in the U.S. education sector. On average, educational institutions across America take approximately 4.8 months to publicly disclose data breaches resulting from ransomware attacks. In some extreme cases,…
Salesforce plans to acquire Convergence.ai to accelerate the development of its next-generation AI agents. The company signed a definitive agreement for the acquisition and expects Convergence’s team and technology to play a “central role” in advancing its AI agent platform, Agentforce, according to a Thursday (May 15) press release. The acquisition is expected to close in the second quarter of Salesforce’s fiscal year 2026, subject to customary closing conditions, according to the release. “The next wave of customer interaction and employee productivity will be driven by highly capable AI agents that can navigate the complexities of today’s digital work,” Adam…
Ivanti EPMM users urgently need to patch against actively exploited 0day vulnerabilities (CVE-2025-4427, CVE-2025-4428) that enable pre-authenticated remote code execution, warns watchTowr. Cybersecurity researchers at watchTowr have shared details of two security vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) software, identified as CVE-2025-4427 and CVE-2025-4428 that can be combined to gain complete control over affected systems and are actively exploited by attackers. Ivanti EPMM is a Mobile Device Management (MDM) solution system, crucial for enterprise security, acting as a central point to control software deployment and enforce policies on employee devices. However, the abovementioned flaws are turning this management tool…