Author: HackWatchit

Microsoft will continue investing in capital expenditures throughout its fiscal year 2026 after seeing its cloud and artificial intelligence (AI) offerings lead its revenue gains in the third quarter of fiscal year 2025. “These investments, along with focused execution that delivers near-term value to our customers, will ensure we continue to lead through the cloud and AI opportunity ahead,” Microsoft Chief Financial Officer Amy Hood said Thursday (April 30) during the company’s quarterly earnings call. Microsoft’s Intelligent Cloud business led the company’s revenue growth during the quarter ended March 31, according to a presentation released Wednesday in conjunction with the…

Click on the timecodes to jump to that part of the video (on YouTube) 2:26 Introduction, background history covering LaBrea Tar Pits and ARP Cache Poisoning and how they relate to this webcast and how “eavesarp” basically works.14:15 Demo of “eavesarp” against a Stale Network Address Configuration (SNAC) attack. 28:45 Q&A This webcast was recorded live originally on June 12th, 2019 with John Strand and Justin Angel. Justin wrote an extensive blog post on this topic: Analyzing ARP to Discover & Exploit Stale Network Address Configurations eavesarp – GitHub: https://github.com/arch4ngel/eavesarp When you are on a pentest (or an internal assessment)…

One of the most prevalent concerns for security leaders is cost – namely, how they can work within their budget and still keep their organization protected. Business leaders understand that security is important, but security leaders are still grappling with how to do more with less.  Security Information and Event Management (SIEM) is typically the largest budget line-item for a CISO, and it sits at the heart of security operations (SecOps). Some organizations have purchased a wide array of security products, and now they’re struggling to figure out how to reap the value of these tools. While traditional SIEMs have…

Machine identities are multiplying fast, and many organizations are struggling to keep up. In this Help Net Security interview, Wendy Wu, CMO at SailPoint, explains why machine identity security matters, where most companies go wrong, how automation can help, and what the rise of AI agents means for the future of identity management. Why has machine identity security become such a critical component of cybersecurity strategies in recent years? The simplest answer is that while machine identities like service account, RPA, IoT devices, bots, have existed for a long time, the number in use has exploded in recent years. In…

France accuses Russia’s APT28 hacking group (Fancy Bear) of targeting French government entities in a cyber espionage campaign. Learn about the GRU-linked attacks, tactics, and previous incidents like the TV5Monde hack. France has accused the Russian state-backed hacking group APT28, linked to Russia’s military intelligence agency GRU (Russian General Staff Main Intelligence Directorate), of targeting or compromising a dozen French government and other organizations. Active since at least 2004 under names like BlueDelta, Fancy Bear, Forest Blizzard, Sednit, and Sofacy; APT28 typically targets government, military, energy, and media in Europe and the US. Now, a report by the French cybersecurity…

Forescout Technologies Inc. analyzed 780 hacktivist attacks in 2024, claimed by four groups active on opposing sides of the Russia-Ukraine and Israel-Palestine conflicts: BlackJack, Handala Group, Indian Cyber Force, and NoName057(16). Critical infrastructure remains a prime target, with government and military systems ranking at the top. Distributed Denial of Service (DDoS) attacks on websites continue to be the primary method used. As hacktivism increasingly intertwines with state interests, more than one-fifth of the attacks were directed at the transportation and logistics industries. Financial services, telecommunications, energy, and manufacturing also ranked among the top six most targeted sectors. In a report titled…

North Carolina’s House of Representatives passed a bill that would authorize the state to invest in digital assets, part of a push among states to adopt crypto.The measure now moves to the Senate for further debate.Dubbed the “Digital Assets Investment Act,” HB92 was introduced on February 10 and passed its third reading in the House on Wednesday.Primarily sponsored by Republican House Speaker Destin Hall, the bill will allow the State Treasurer to invest in qualified digital assets and consider incorporating them into state employee retirement plans.It instructs the Treasurer’s office to explore suitable investment vehicles, recommend contribution limits, and develop…

A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. U.S. prosecutors allege Tyler Robert Buchanan and co-conspirators hacked into dozens of companies in the United States and abroad, and that he personally controlled more than $26 million stolen from victims. Scattered Spider is a loosely affiliated criminal hacking group whose members have broken into and stolen data from some of the world’s largest technology companies. Buchanan was arrested in Spain last…

This webcast was originally given live on June 5th, 2019 by John Strand and the BHIS (card) Testers. How To Play! download and print a pdf version of “how to play” So we have been working on a card game for Incident Response over the past few months and it is ready for a dry run! The card game will be called, “Backdoors & Breaches”. We wanted to take this opportunity to give the game a few run-throughs on a BHIS webcast: to give people an idea of the mechanics of the game and get feedback from all of you.…