Author: HackWatchit
The communication app TeleMessage Signal, used by at least one top Trump administration official to archive messages, has already reportedly suffered breaches that illustrate concerning security flaws and resulted in its parent company imposing a service pause this week pending investigation. Now, according to detailed new findings from the journalist and security researcher Micah Lee, TM Signal’s archiving feature appears to fundamentally undermine Signal’s flagship security guarantees, sending messages between the app and a user’s message archive without end-to-end encryption, thus making users’ communications accessible to TeleMessage.Lee conducted a detailed analysis of TM Signal’s Android source code to assess the…
Cybercriminals are using fake Social Security Administration emails to distribute the ScreenConnect RAT (Remote Access Trojan) and compromise user computers. Cybersecurity experts have uncovered ongoing schemes where criminals are exploiting the US Social Security Administration (SSA) to trick people into installing a dangerous Remote Access Trojan (RAT) called ScreenConnect on their computers. Once installed, this program gives the attackers complete remote control, allowing them to steal personal information and install more harmful software. Researchers at Malwarebytes first noticed these fake emails that inform people that their “Social Security Statement is now available” and urged them to download an attachment or…
Samsung MagicINFO flaw exploited days after PoC exploit publication Pierluigi Paganini May 06, 2025 Threat actors started exploiting a vulnerability in Samsung MagicINFO only days after a PoC exploit was published. Arctic Wolf researchers observed threat actors beginning to exploit a high-severity vulnerability, tracked as CVE-2024-7399 (CVSS score: 8.8), in the Samsung MagicINFO content management system (CMS) just days after proof-of-concept (PoC) exploit code was publicly released. The vulnerability is an improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050, an attacker can exploit the flaw to write arbitrary file as…
Podcast: Play in new window | DownloadSubscribe: Apple Podcasts | Spotify | Amazon Music | RSS In this webcast we cover some of the core tools we use all the time at Black Hills Information Security. However, there’s a twist. We don’t talk about Nessus, Nmap, or Metasploit. Why? Because there are a ton of new (and older) tools we use that fall outside of the standard tools you see in every security book/blog out there. Slides available here: https://blackhillsinformationsecurity.shootproof.com/gallery/8393821/ Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-What-You-Can Training Available live/virtual and on-demand
Whether your organization is already in the cloud or just starting to plan your migration, security is a top priority. This webinar will help you to better understand your options for cloud migration as well as learn how to prioritize cloud security and compliance before you’re even in the cloud using resources from the Center for Internet Security (CIS). At the end of the webinar, you’ll learn: What cloud migration is, the reasons why organizations choose to move to the cloud, and how you can migrate to the cloud What factors commonly cause cloud migrations to fail How to take…
During our time at Black Hat Asia, we made sure Snort ML (machine learning) was enabled. And it was definitely worth it. We had multiple triggers of the new Snort feature where it was able to detect a potential threat in the http parameters of an HTTP request. Let us dive into this new detection and see what it found! Looking at the events, we can see multiple different IPs from a training class and one on the General Wi-Fi network triggering these events. Investigating the event with the 192 address, we can see what it…
Coinbase unveiled an open-source protocol for on-chain payments via HTTP called x402. Announced on May 6, the system repurposes the previously unused HTTP 402 “Payment Required” status code to support direct machine-native payments using stablecoins.The protocol enables autonomous agents and applications to pay for API access, data, and services without relying on human intervention, subscriptions, or traditional payment infrastructures.Business models and use casesThe core design of x402 enables a server to issue an HTTP 402 response with payment instructions when a client requests a paid resource. Upon receiving the payment requirement, the client, whether a human user or an autonomous agent, can…
Digital transformation company Atos announced Monday the launch of its SecureHorizons NIS2 Compliance Manager Application, powered by ServiceNow, to replace time-consuming and error-prone manual processes with automated workflows, enabling organizations to meet the stringent compliance requirements of the NIS2 Directive. The NIS2 Directive, the latest iteration of the Network and Information Security Directive, is a European policy aimed at strengthening cybersecurity across the European Union (EU). It is designed to help organizations protect themselves against cyber threats and ensure that the EU’s cyber infrastructure is more secure and robust. The NIS2 directive has become mandatory for every company, wherever they…
How leading fintechs are fighting back The good news: as fraudsters arm themselves with AI, fintechs can do the same. Advanced bot management and cyberfraud protection solutions now combine real-time AI, multi-layered analysis, and adaptive defenses to stop fraud before it happens. Here’s what leading fintechs are prioritizing: Real-time, AI-driven detectionTop solutions analyze every login attempt, transaction, and API request in milliseconds—often at the edge, before they reach backend systems. This level of speed is critical for stopping credential stuffing, carding, and automated account creation attempts. Multi-layered behavioral & intent-based analysis Effective platforms gather hundreds of signals—device fingerprinting, mouse and…