Author: HackWatchit

Bradley K. was a brand-new dad, sleep-deprived and juggling life with a newborn, when he received a phone call that would change everything. The caller claimed to be from the IRS and said Bradley owed back taxes. If he didn’t pay immediately, they warned, he could be arrested.  Unfortunately, it was a tax scam—and one that cost him $800 and left him shaken for months.  The IRS Phone Scam That Took Advantage of a Vulnerable Moment  Like many Americans, Bradley had just filed his taxes. When the call came through, it seemed believable. The caller knew personal information, spoke with…

As security professionals, we’ve watched organizations invest millions of dollars in sophisticated security technologies over the years. Intrusion detection and prevention, EDR, SIEM, zero-trust network access — the technological arsenal continues to expand. Yet despite these advancements, human nature remains the most consistently vulnerable security risk. We regularly hear from security leaders who experienced breaches not because their technology failed, but because an employee was successfully manipulated. Businesses are increasingly recognizing the human risk factor, taking steps to address it through strategic human risk management.   Taking a Data-Driven Approach to Cybersecurity Security awareness training (SAT) has been the standard bearer for addressing human-centered risks…

The state-backed North Korean threat group Konni (Opal Sleet, TA406) was observed targeting Ukrainian government entities in intelligence collection operations. The attackers use phishing emails that impersonate think tanks, referencing important political events or military developments to lure their targets. Proofpoint researchers who discovered the activity in February 2025 suggest that it’s likely an effort to support the DPRK’s military involvement alongside Russia in Ukraine and evaluate the political status underpinning the conflict. “Proofpoint assesses TA406 is targeting Ukrainian government entities to better understand the appetite to continue fighting against the Russian invasion and assess the medium-term outlook of the…

Podcast: Play in new window | DownloadSubscribe: Apple Podcasts | Spotify | Amazon Music | RSS John Strand talks about how BHIS pen tests companies who use the cloud. Want to know how you can defend against attacks in your cloud infrastructure? Keep your eyes peeled for part 4! Links: Slides for this webcast can be found here, along with the full video Chris Truncer’s GitHut: EyeWitness Chris’s user guide to EyeWitness BB King adds, “If someone’s asking about EyeWitness, point them at the Docker-ized version. It can be finicky about installation, and will drive you up a fargin’ wall.” Shodan Carrie’s Blog…

LastPass has announced the general availability of SaaS Monitoring. This new capability empowers organizations of all sizes to gain visibility into their Software-as-a-Service ecosystem, reduce risk from Shadow IT and Shadow AI, and optimize costs. “SaaS Monitoring gives businesses something they’ve been missing – visibility and control,” said Don MacLennan, Chief Product Officer at LastPass. “In their efforts to enhance productivity, employees often turn to SaaS and AI tools outside of company policies. This Shadow IT usage can result in cost overruns and business-critical data exposures. SaaS Monitoring from LastPass is an affordable, easy-to-deploy capability that gives businesses the visibility…

Commvault, provider of cyber resilience and data protection solutions for the hybrid cloud, announced on Monday a strategic alliance with Deloitte. Together, Commvault and Deloitte aim to help organizations stay ahead of evolving threats by becoming more resilient, enabling the enterprise of the future. In today’s digital landscape, there is an urgent need for incident response and comprehensive cyber resilience strategies. In fact, in Deloitte Global’s Future of Cyber 4th edition survey, 43 percent of U.S. respondents cited keeping pace with the evolving threat landscape as one of the top strategic challenges to contend with. The escalating sophistication and frequency…

What do you do if you’re down on your luck?Maybe you struggled at school through no fault of your own. Perhaps you didn’t manage to get any formal qualifications which would help you in the career you’re interested in pursuing. Maybe your relationship with your partner – who you have had three kids with – has irrevocably broken down.You’ve tried to set up your own business designing websites, but it’s not giving you the life you want.What do you do?Well, I really hope you don’t follow in the footsteps of 43-year-old Suleman Mazhar, who was sentenced by an Irish court…

Henry A. had been trying for weeks to score a ticket to see Tyler, the Creator in Dallas. Even without a confirmed seat, he headed to the venue hoping for a miracle. And that’s when the message came in—someone nearby claimed to have extra tickets.  The seller said he was just outside too. The price? Reasonable enough. The tone? Casual and confident. All Henry had to do was send half the money to hold the tickets.  Minutes later, he sent the full $280.  “I was already in line—excited, hopeful, and just trying to get in. That made me an easy…

Zoom fixes multiple security bugs in Workplace Apps, including a high-risk flaw. Users are urged to update to the latest version released on May 13, 2025. Zoom pushed out a batch of security fixes today, addressing multiple vulnerabilities across its Workplace Apps. One of them has been marked high severity, while the others are rated medium. The updates affect both general app versions and Windows-specific builds. For anyone using Zoom in business or education settings, especially on Windows systems, these updates are worth attention. What Was Fixed The most significant of the bunch is a time-of-check to time-of-use (TOCTOU) issue…