Author: HackWatchit

Slides Timecode links take you to YouTube: 4:11 – Infrastructure & Background8:28 – Overview & Breakdown of Attack Methodology and Plans11:35 – Start of Attack (Gaining Access), Password Spraying Toolkit15:24 – Mailsniper, Retrieve Global Access List21:58 – Lateral Movement, OWA, VPN, SSH27:05 – Scanning/Enumeration, Nmap SSH Brute Force, “Find Open”, Movement, Gaining Access34:07 – Gaining Access, Test for LLMNR, What is LLMNR, Responder, NtlmRelayX45:53 – Gaining Access, Lateral Movement – crackmapexec50:29 – Gaining Access, GoPhish Campaign, Additional Paths to Access, HTA, Cobalt Strike59:48 – Wrap Up Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_AttackTactics5ZerotoHeroAttacks.pdf Presented BHIS Testers by: Jordan…

How COTI’s Role in Saudi Arabia’s AI and Blockchain Centre Could Shape the Future of Web3 and Real-World Assets Why is a blockchain protocol from Israel becoming a key player in Saudi Arabia’s ambitious AI and blockchain plans? The announcement of COTI as a founding member of the newly formed Saudi Arabia AI and Blockchain Centre (SAAIBC) raises questions about the intersection of blockchain, geopolitics, and next-generation infrastructure. It also offers a window into the Kingdom’s strategy to lead AI and blockchain adoption across the Middle East and Africa.SAAIBC, launched at the Real-World-Asset (RWA) Summit in Dubai, is positioned as…

Author/Presenter: Randall Wyatt Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel. Permalink The post BSidesLV24 – Proving Ground – You Can Be Neurodivergent And Succeed In InfoSec appeared first on Security Boulevard.

LinkedIn is the go-to platform for professional networking and job hunting. With over a billion users worldwide, professional opportunities are often just a connection request away. Although LinkedIn helps users grow their careers, it’s also susceptible to scams. Whether with recruiters, potential clients, or fellow professionals, LinkedIn users expect genuine interactions. This can lead them to lower their guards and be less suspicious than they would otherwise be on other social media platforms. It’s little wonder that LinkedIn has become a prime target for scammers looking to exploit that trust. From fake job offers to phishing messages and investment cons,…

While much of the cybersecurity community’s attention was out west at the annual RSA Conference, the Justice Department announced yet another settlement in its pursuit of contractors who falsely attest to meeting cybersecurity requirements. DoJ announced today that Raytheon Company, RTX Corporation and Nightwing Group have agreed to pay $8.3 million to settle allegations that Raytheon violated the False Claims Act by falling short of contractually mandated cybersecurity standards. RTX sold its cybersecurity, intelligence and services business to Nightwing in 2024. DoJ’s case centered on conduct between 2015 and 2021, prior to the acquisition. The case is another feather in…

German police seized the dark web shop Pygmalion, gaining access to customer data linked to over 7,000 drug orders in a major investigation. A major dark web drug operation and marketplace operating under the name “Pygmalion” has been disrupted by German law enforcement, with its infrastructure dismantled and several individuals arrested following a months-long investigation. The Bavarian State Criminal Police Office (BLKA), working with the Central Office for the Prosecution of Cybercrime (ZCB) and backed by the Federal Criminal Police Office (BKA), seized multiple servers and onion domains used by the vendor. The seized dark web domains now display a…

Attackers have been using two previously known vulnerabilities (CVE-2024-38475, CVE-2023-44221) to compromise SonicWall secure mobile access devices, the vendor has confirmed by updating the associated advisories. CISA has added the two flaws to its Known Exploited Vulnerabilities catalog, and Watchtowr researchers have analyzed how they can be being chained together and have released a proof-of-concept exploit (or, as they call it, a “Detection Artefact Generator”). The exploited vulnerabilities (CVE-2024-38475, CVE-2023-44221) Sonicwall SMA100 appliances are VPN gateways used by organizations to allow employees to safely access enterprise applications. CVE-2024-38475 is a path traversal vulnerability in Apache HTTP Server v2.4.59 and earlier,…

Michael Allen // A couple of years ago, I had a YubiKey that was affected by a security vulnerability, and to fix the issue, Yubico sent me a brand new YubiKey for free. Since I didn’t use the old YubiKey for authentication after receiving the new one, I decided to see if I could turn it into something similar to a USB Rubber Ducky – a USB device that emulates a keyboard and sends a computer a series of pre-programmed keypresses when it is plugged in. It turned out that I was able to do just that, and although a…

Microsoft sets all new accounts passwordless by default Pierluigi Paganini May 02, 2025 Microsoft announced that all new accounts will be “passwordless by default” to increase their level of security. Microsoft now makes all new accounts “passwordless by default,” enhancing protection against social engineering attacks, phishing, brute-force, and credential stuffing attacks. “As part of this simplified UX, we’re changing the default behavior for new accounts. Brand new Microsoft accounts will now be “passwordless by default.”” states the company’s announcement.” “New users will have several passwordless options for signing into their account and they’ll never need to enroll a password. Existing…