Author: HackWatchit

 Tom, can you tell us a bit about yourself? Currently I have the privilege of leading the Incident Response Team for EMEA at Check Point, based in Belgium, where I live with my wife and two daughters. My journey into cyber security started in 2011, but before that, I served in the Belgian infantry combat forces. That experience taught me discipline, adaptability, resilience, and above all, the importance of teamwork and cohesion. In high-pressure environments, a well-oiled team can achieve things that seem out of reach. That mindset has stayed with me ever since and plays a huge role in…

In today’s digital age, passwords are becoming increasingly unreliable. Cybercriminals are now using advanced AI-powered tools to quickly guess passwords, making it easier for them to breach accounts. To counter this growing threat, the UK government has decided to phase out traditional passwords in favor of a more secure and user-friendly solution: Passkeys. These new digital credentials are expected to offer enhanced security, ease of use, and greater convenience, at least for now.How Do Passkeys Work? The underlying technology behind passkeys is rooted in cryptography. Essentially, when you create an online account, two keys are generated: a public key and…

SonicWall has fixed multiple vulnerabilities affecting its SMA100 Series devices, one of which (CVE-2025-32819) appears to be a patch bypass for an arbitrary file delete vulnerability that was exploited in zero-day attacks in early 2021, and may have also been leveraged in the wild. The vulnerabilities and the attack chain Sonicwall SMA100 Series appliances provide a unified secure access (VPN) gateway for small and medium-size businesses, and are regularly targeted by attackers. Reported by Rapid7 researcher Ryan Emmons, two of the fixed vulnerabilities allow a remote attacker who is able to log in with a low-privilege SMA user account to…

Kent Ickler & Jordan Drysdale // Preface We had a sysadmin and security professional “AA” meeting on November 8, 2018. We met and discussed things that seem to be painfully slow to take hold in our organizations; patching, regular scanning, even just finding time to manage our inventory. Slides available here: https://blackhillsinformationsecurity.shootproof.com/gallery/7945173/ Five Things (That Seriously Make A Difference) Baselining a network with Nmap, Masscan, learning networking Inventory management and gaining control Updates, Upgrades, Patching. Revisit baselining. Hardening cleartext services. Group policies we love, the ones that make it hard for pentesters and attackers We talked about a whole lot more…

U.S. CISA adds GoVision device flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 08, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GoVision device flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2024-6047 (CVSS score 9.8) GeoVision Devices OS Command Injection Vulnerability. Multiple EOL GeoVision devices fail to properly filter user input for the specific functionality. An unauthenticated remote attacker can exploit the CVE-2024-6047 vulnerability…

Brits face empty shelves and suspended meal deals as cybercriminals hit major high street retailers, and a terminated Disney employee gets revenge with a little help with Wingdings. Plus Graham challenges Carole to a game of “Malware or metal?”, and we wonder just happens when you have sex on top of a piano? All this and more is discussed in the latest edition of the award-winning “Smashing Security” podcast by computer security veterans Graham Cluley and Carole Theriault. Plus! Don’t miss our featured interview with Jon Cho of Dashlane. Warning: This podcast may contain nuts, adult themes, and rude language.…

Every company I worked for until today, there it was: the resilient MS Excel. Excel was first released in 1985 and has remained strong until today. It has survived the rise of relational databases, the evolution of many programming languages, the Internet with its infinite number of online applications, and finally, it is also surviving the era of the AI. Phew! Do you have any doubts about how resilient Excel is? I don’t. I think the reason for that is its practicality to start and manipulate a document quickly. Think about this situation: we’re at work, in a meeting, and…

The United States Customs and Border Protection agency confirmed on Wednesday that it uses at least one communication app made by the service TeleMessage, which creates clones of popular apps like Signal and WhatsApp with the addition of an archiving mechanism for compliance with records-retention rules.“Following the detection of a cyber incident, CBP immediately disabled TeleMessage as a precautionary measure,” CBP spokesperson Rhonda Lawson tells WIRED. “The investigation into the scope of the breach is ongoing.”President Donald Trump’s now former national security adviser Mike Waltz was photographed last week using TeleMessage Signal during a cabinet meeting, and the photo seemed…

Austin, USA / Texas, May 7th, 2025, CyberNewsWire SpyCloud, the leading identity threat protection company, today released an analysis of nearly 6 million phished data records recaptured from the criminal underground over the last six months. Phishing attacks have been growing in scale and sophistication, and SpyCloud’s research reveals that cybercriminals are increasingly targeting high-value identity data that can be used for follow-on attacks like ransomware, account takeover, and fraud.  While the data reflects only a snapshot of the phishing threat landscape, it provides valuable insights for organizations seeking to bolster defenses, enhance user training, and prevent identity-based attacks.  Key…