Author: HackWatchit
Federal governments, citizens can’t afford untested cybersecurity solutions To create a truly secure cyber ecosystem for the systems, cybersecurity professionals should implement solutions that are transparent, resilient and validated. Adam Maruyama April 29, 2025 1:38 pm 4 min read It’s undeniable that the stakes for federal and critical infrastructure cybersecurity have increased exponentially, particularly since the advent of generative AI. Yet many cybersecurity solutions available today use opaque algorithms that may not yet have proven themselves against the magnitude of the threat our adversaries pose. To create a truly secure cyber ecosystem for the systems that protect citizen data and…
TJ Nicholls // *BHIS Guest Contributor TL;DR How many times have you had to parse the same output from a tool? Wouldn’t you like to get that time back? There is a lot of overlap in the tools we use and the workflows we perform as information security professionals. Let’s not reinvent the wheel every time we need to extract data from a tool. PyFunnels can act as a centralized and collaborative library. Enjoy the fruit of someone else’s labor. ? If the capability isn’t there, consider committing your Python3 code to the library in GitHub for future use. Below…
U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 30, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added SAP NetWeaver flaw, tracked as CVE-2025-31324, to its Known Exploited Vulnerabilities (KEV) catalog. Last week, researchers warned that a zero-day vulnerability, tracked as CVE-2025-31324 (CVSS score of 10/10), in SAP NetWeaver is potentially being exploited. Thousands of internet-facing applications are potentially at risk. The flaw in SAP NetWeaver Visual Composer Metadata Uploader stems from a lack of proper authorization checks.…
Trend Micro researchers have uncovered that an advanced persistent threat (APT) group known as Earth Kurma is actively targeting government and telecommunications organizations across Southeast Asia. The group employs sophisticated custom malware, kernel-level rootkits, and trusted cloud services to carry out cyberespionage operations. Organizations face potential compromise of sensitive government and telecommunications data, with attackers maintaining prolonged, undetected access to their networks. Earth Kurma’s campaigns showcase adaptive malware toolsets, strategic exploitation of cloud infrastructure, and advanced evasion techniques designed to bypass security defenses. These hackers leverage cloud storage services for covert data exfiltration, making detection and mitigation significantly more challenging.…
If me for a while, you probably know I started my career as a QA engineer before transitioning into the world of data analytics. I didn’t go to school for it, didn’t have a mentor, and didn’t land in a formal training program. Everything I know today—from SQL to modeling to storytelling with data—is self-taught. And believe me, it’s been a journey of trial, error, learning, and re-learning. The Dilemma That Changed My Career A few years ago, I started thinking about switching organizations. Like many people in fast-evolving tech roles, I faced a surprisingly difficult question: What role am…
A new cryptocurrency exchange named Grinex is believed to be a rebrand of Garantex, a Russian cryptocurrency exchange whose domains were seized by the U.S. authorities and an admin arrested. According to a new report by blockchain intelligence firm TRM Labs, Grinex shows strong ties to Garantex’s previous operations but has not determined if it’s currently being used for illicit transactions. Garantex was a Russian cryptocurrency exchange, officially registered in Estonia, that was sanctioned by the U.S. (OFAC) in April 2022, followed by similar actions by the UK and the EU. U.S. authorities seized Garantex’s domains in early March 2025…
Brian Fehrman // Many of you have likely heard of Domain Fronting. Domain Fronting is a technique that can allow your C2 traffic to blend in with a target’s traffic by making it appear that it is calling out to the domain owned by your target. This is a great technique for red teamers to hide their traffic. Amazon CloudFront was a popular service for making Domain Fronting happen. Recently, however, changes have been made to CloudFront that no longer allow for Domain Fronting through CloudFront to work with Cobalt Strike. Is all lost with CloudFront and Cobalt Strike? In…
In brief University of Zurich researchers used AI bots to pose as humans on Reddit, including fabricated personas like trauma counselors and political activists. The bots engaged in over 1,700 debates on the r/ChangeMyView subreddit, successfully changing users’ opinions in many cases. Reddit moderators and legal counsel condemned the experiment as unethical, citing deception, privacy violations, and lack of consent. Researchers at the University of Zurich have sparked outrage after secretly deploying AI bots on Reddit that pretended to be rape survivors, trauma counselors, and even a “Black man opposed to Black Lives Matter”—all to see if they could change…
Author/Presenter: Hirofumi Kawauchi Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel. Permalink The post BSidesLV24 – Ground Truth – Reassessing 50k Vulnerabilities: Insights From SSVC Evaluations In Japan’s Largest Telco appeared first on Security Boulevard.