Author: HackWatchit

Download slides: https://www.activecountermeasures.com/presentations In this webcast we walk through the step-by-step defenses to stop the attackers in every step of the way we showed in Attack Tactics Part 5!!! Originally recorded as a live webcast on May 16th, 2019Presented by: John Strand, Jordan Drysdale, Kent Ickler Want to learn more mad skills from the person who wrote this blog? Check out these classes from Jordan and Kent:

New research from ISACA’s global Quantum Computing Pulse Poll highlights a growing concern – the rapid rise of quantum computing poses a serious risk to cybersecurity and business stability, yet most enterprises remain unprepared. While 62 percent of technology and cybersecurity professionals fear that quantum computing could break current internet encryption standards, only five percent consider it a high priority in the near term, while five percent say their organizations have a defined strategy to address it. More than 2,600 global professionals in digital trust, cybersecurity, IT audit, governance and risk were surveyed in this inaugural ISACA poll on the…

FBI shared a list of phishing domains associated with the LabHost PhaaS platform Pierluigi Paganini May 01, 2025 The FBI shared 42K phishing domains tied to LabHost, a PhaaS platform shut down in April 2024, to boost awareness and help identify compromises. The FBI shared a list of 42,000 domains registered from November 2021 to Apr 2024, linked to LabHost to raise awareness and aid in threat detection. The domain list helps prevent future malicious use, allows security teams to scan past logs for breaches, and supports phishing analysis and model training. “The Federal Bureau of Investigation (FBI) is releasing…

SEO: Cybercriminals are using the recent power outages in Spain and Portugal to launch phishing attacks disguised as TAP Air Portugal, aiming to steal personal and financial data. Cybersecurity researchers at Cofense Intelligence recently uncovered a deceptive email campaign containing fraudulent messages designed to mimic official communications from TAP Air Portugal, the national airline of Portugal. This particular scheme exploited a significant news event: the widespread power outage that affected both Spain and Portugal on April 28, 2025. It is worth noting that these malicious emails were distributed while the disruption was still ongoing. This timing suggests the perpetrators’ deliberate…

In this Help Net Security interview, Steven Furnell, Professor of Cyber Security at the University of Nottingham, illustrates how small and medium-sized businesses (SMEs) must reassess their risk exposure and prioritize resilience to safeguard their long-term growth and stability. Learn how SMEs can better protect themselves, adapt to regulations, and build stronger cyber resilience. Where do you see SMEs most vulnerable? Is it still phishing and ransomware, or are there more nuanced threats emerging? Phishing and ransomware are still prominent threats, and so they are certainly issues that SMEs need to be aware of. Attackers are willing and able to…

Can a single-click really migrate billions in DeFi liquidity? That is the question being answered by a major new partnership in the blockchain space. Enso, Stargate, and LayerZero have collaborated to create a new infrastructure that allows Uniswap liquidity providers (LPs) to migrate their positions to Unichain with just one click. The announcement suggests that as much as $3.5 billion in liquidity could soon be moved to Unichain using this method. This development marks a significant shift in how liquidity is transferred across blockchains and highlights the growing need for composable infrastructure that abstracts away blockchain complexity from end users.Understanding…

Table of Contents Ransomware Evolution Payment Rates Types of Ransomware Attack Vectors TTPs Victimology As we approach the one year anniversary of two prominent ransomware group collapses (Lockbit and BlackCat/ALPHV), we find the ransomware ecosystem to be as fractured and uncertain as it did in the months following these events. The Ransomware-as-a-Service (RaaS) model remains irreversibly tarnished after the groups that pioneered this framework were exposed as being fraught with infighting, deception, lost profits, and compromised anonymity for their affiliates. Joint law enforcement actions over the last year have systematically impaired the resources ransomware actors depend on to operate. In…

U.S. Immigration and Customs Enforcement issued a notice of intent to fine three local businesses over $8 million following worksite audits that uncovered widespread employment eligibility violations. The companies fined include: CCS Denver, Inc. – Fined $6,186,171 after a 100% substantive violation rate and evidence of knowingly hiring and employing at least 87 unauthorized workers. PBC Commercial Cleaning Systems, Inc. – Fined $1,599,510 for a 74% violation rate and a pattern of knowingly employing at least 12 unauthorized workers. Green Management Denver – Fined $270,195 after a 100% violation rate and identification of 44 unauthorized employees. ICE Homeland Security Investigations’…

Joff Thyer // The Domain Name System (DNS) is the single most important protocol on the Internet. The distributed architecture of DNS name servers and resolvers has resulted in a resilient and highly scalable system that is largely unchanged from the early days of NSFNET. It is a unique solution that allows domain holders to manage their own zone data while still being linked into the global hierarchy of distribution Internet domains across the world.   In the security context, knowing what our client systems are looking up in the DNS yields valuable information about normal versus abnormal operations in…