Author: HackWatchit
Author/Presenter: Hirofumi Kawauchi Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel. Permalink The post BSidesLV24 – Ground Truth – Reassessing 50k Vulnerabilities: Insights From SSVC Evaluations In Japan’s Largest Telco appeared first on Security Boulevard.
In episode 48 of The AI Fix, OpenAI releases the first AI models capable of novel scientific discoveries, ChatGPT users are sick of its relentlessly positive tone, our hosts say “Alexa” a lot, OpenAI eyes a social network of its own, and some robots run a half-marathon. Graham discovers AI Jesus and a great offer on some Casper mattresses, and Mark wonders if the technological singularity is actually much closer than we thought. All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham Cluley and Mark Stockley. Powered by RedCircle Hosts: Graham…
CrowdStrike is expanding the capabilities of CrowdStrike Falcon® Data Protection and introducing a new offering, SaaS Threat Services, enabling security teams to protect sensitive data across endpoints, cloud environments, and GenAI and SaaS applications. Today’s adversaries are targeting data wherever it resides. As GenAI adoption accelerates, misconfigured applications and unsecured usage create new vectors for data exposure. Legacy data loss prevention solutions, which often require separate tools for endpoint and cloud environments, aren’t enough to defend against modern attacks. CrowdStrike is closing the gaps adversaries exploit to steal data by protecting sensitive information across modern hybrid environments. Falcon Data Protection…
Highlights Booking Holdings reported $46.7 billion in gross bookings (up 7% YoY) and $4.8 billion in revenue (up 8% YoY) in Q1 2025, driven by diversified offerings and growth in room nights, rental cars and airline ticket sales, despite broader economic and geopolitical uncertainties. The company is pushing forward with its “connected trip” vision, leveraging AI tools, a revamped loyalty program and platform enhancements to improve customer experience, reduce marketing reliance and drive cross-selling. Though GAAP net income dropped 57% due to transformation costs and investment cycles, adjusted EPS rose 22% and EBITDA 21%, showing Booking’s focus on cost efficiency,…
In 2024, threat actors exploited 75 zero-days – i.e., vulnerabilities previously unknown to vendors, thus without a readily available patch – in a wide variety of attacks. Of these, 33 vulnerabilities (44%) affected enterprise solutions, which is up from 37% in 2023, according to Google Threat Intelligence Group researchers. “Zero-day vulnerabilities in security software and appliances were a high-value target in 2024. We identified 20 security and networking vulnerabilities, which was over 60% of all zero-day exploitation of enterprise technologies,” they noted. “Exploitation of these products, compared to end-user technologies, can more effectively and efficiently lead to extensive system and…
The cyberattack on Marks & Spencer (M&S) is linked to the notorious Scattered Spider group. Explore the severe impact of the incident on M&S, including contactless payment failures, online delivery delays, and significant stock shortages in physical locations. The recent cyber-attack that significantly disrupted operations at the British retailer Marks & Spencer (M&S) has now been linked to a notorious hacking collective known as Scattered Spider, the same group implicated in the high-profile 2023 attack on MGM Resorts. As per Hackread.com’s initial report on April 23, 2025, the attack resulted in the shutdown of contactless payment systems, the Click and…
SentinelOne warns of threat actors targeting its systems and high-value clients Pierluigi Paganini April 29, 2025 SentinelOne warns China-linked APT group PurpleHaze attempted reconnaissance on its systems and high-value clients. Cybersecurity firm SentinelOne warns that a China-linked APT group, tracked as PurpleHaze, attempted to conduct reconnaissance on its infrastructure and high-value clients. The activity suggests targeted cyberespionage efforts aimed at gathering information for potential future attacks. SentinelOne first identified PurpleHaze’s activity during a 2024 intrusions into a former hardware logistics provider for its employees. Over several months, SentinelLABS observed this group targeting multiple entities, including a South Asian government support…
Click on the timecodes to jump to that part of the video (on YouTube) Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_WeaponizingActiveDirectory.pdf 0:54 Background behind this webcast, what and why 7:02 Creating resources in Active Directory, User accounts, Groups, and Dummy Computer accounts 18:54 Tools, ResponderGuard, General flow of attacks, reconnaissance, deception and planted credentials 38:12 Password Spraying, honey users, kerberoast, and multicast DNS poisoning 47:20 Detection with CredDefense Kit, ResponderGuard, ResponderGuard Agent, and SQL Server abuse attacks 53:43 Q&A and Closing Thoughts This webcast was recorded live originally on August 1st, 2019 with David Fletcher. The 2019 Verizon…
San Francisco, United States, April 29th, 2025, CyberNewsWire By fusing agentic AI and contextual threat intelligence, SecAI transforms investigation from a bottleneck into a force multiplier. SecAI, an AI-enriched threat intelligence company, made its official debut today at RSA Conference 2025 in San Francisco, marking the company’s first public appearance on the global cybersecurity stage. At the event, the SecAI team is showcasing the latest version of its platform to security professionals from around the world. The updated SecAI Investigator platform is purpose-built to solve one of cybersecurity’s most stubborn challenges: efficient threat investigation. It tackles this by combining two…