Author: HackWatchit

In 2024, ninety-two percent of healthcare organizations contended with at least one cyber attack. As a result, over 276 million patient records were compromised, translating to the compromise of roughly 758,000 records every single day. Victims of medical identity theft will spend an average of 210 hours and $2,500 (out-of-pocket) to reclaim their identities and resolve breach fallout.  Overview: The Check Point Research team has recently uncovered a sophisticated phishing campaign that impersonates medical service providers, such as Zocdoc, and that involves allusions to fabricated medical clinics. The campaign can be traced back to March 20th, and has been blocked…

Matthew Toussain//* Wouldn’t you like to START your pentests knowing every username for all individuals in your target environment? Gmail, G Suite, Outlook Web Access, Exchange Web Services… Email. A divine gift issued to hackers with no statute of limitations. In this blog we explore an exploitation workflow using new features of the MailSniper toolkit. What happens if you browse to mail.google.com and trying logging in as: [email protected]? It turns out that Google automatically attempts to authenticate you to a G Suite instance associated with the domain blackhillsinfosec.com. Since BHIS has one… this works. What happens if, instead, you tried…

Today is Microsoft’s May 2025 Patch Tuesday, which includes security updates for 72 flaws, including five actively exploited and two publicly disclosed zero-day vulnerabilities. This Patch Tuesday also fixes six “Critical” vulnerabilities, five being remote code execution vulnerabilities and another an information disclosure bug. The number of bugs in each vulnerability category is listed below: 17 Elevation of Privilege Vulnerabilities 2 Security Feature Bypass Vulnerabilities 28 Remote Code Execution Vulnerabilities 15 Information Disclosure Vulnerabilities 7 Denial of Service Vulnerabilities 2 Spoofing Vulnerabilities This count does not include Azure, Dataverse, Mariner, and Microsoft Edge flaws that were fixed earlier this month. To learn more…

Welcome to Behind the Startup, HackerNoon’s series uncovering the real stories behind cutting-edge blockchain projects. Today, we dive into privacy-preserving infrastructure and the future of encrypted, trustless markets with Phil Wirtjes, CEO of Enclave Global. From his early career in health tech to leading a fully encrypted exchange built to tackle front-running, slippage, and permissioned trading—Phil offers a transparent look into how EnclaveX is reshaping digital asset markets. Let’s get right into it. Ishan Pandey: Phil, great to have you here. Before we jump into Enclave Markets, could you walk us through your own journey — from early-stage startups to…

Apple earlier this year settled a years-long class-action lawsuit accusing Siri, its voice-activated AI assistant, of violating users’ privacy by eavesdropping on and recording private and confidential conversations and then sharing those conversations with third parties.The tech giant in January agreed to a $95 million settlement, despite denying the allegations. Now, users of various Siri-enabled devices – including iPhones, iPads, Apple Watches, and MacBooks – can see if they will share in that settlement.According to a statement on the settlement website, people who owned one of the devices listed – which also includes an iMac all-in-one computer, HomePod smart speaker,…

Palo Alto Networks Prisma Access Browser Achieves IRAP Assessment Government organisations and critical infrastructure entities are the custodians of some of the most important and sensitive data in the world. This data and the systems that they process underpin some of the most fundamental functions in modern society, from the provision of food, water, power to the management of welfare, finance and national security information. Consequently they are frequently targeted and attacked by threat actors with considerable capability and intent. The size and scale of Government and critical infrastructure systems, paired with a heavily regulated governing environment, means that the…

Those money-laundering and scam-enabling services, however, are far from the only shady offerings found on Xinbi Guarantee’s market. Elliptic also found listings for surrogate mothers and egg donors, with one post showing faceless pictures of the donor’s body. Other accounts have offered services that will, for a payment in Tether, place a funeral wreath at a target’s door, deface their home with graffiti, post damaging statements around their home, have someone verbally threaten them, throw feces at them, or even, most bizarrely, surround their home with AIDS patients. One posting suggested these AIDS patients would carry “case reports and needles…

Tufin launched Tufin Orchestration Suite (TOS) Discovery, a new solution that helps security teams ensure their network topology is always accurate and up-to-date. Maintaining up-to-date network topology is a crucial task – one that enables proper enforcement of security policies and access validation – and is critical for mitigating vulnerabilities and troubleshooting issues. Despite its importance in establishing and maintaining a safe and secure enterprise network environment, it is traditionally a manual, time-consuming task that is often deprioritized when more immediate network security needs come to the forefront. Tufin’s TOS Discovery automates device discovery and onboarding, delivering accurate, real-time topology…

Jordan Drysdale// Full disclosure and tl;dr: The NCC Group has developed an amazing toolkit for analyzing your AWS infrastructure against Amazon’s best practices guidelines. Start here: https://github.com/nccgroup/Scout2 Then, access your AWS console as a user with privilege enough to create an “auditor” account (best practice tip #1: once your admin accounts are online and MFA enabled, never use the root account). Create a user. Create a group like the following and enable the SecurityAudit role for this user. Review this user account. Download the .csv with your access keys. We are just about ready to run Scout2!!! I cloned the…