Author: HackWatchit

In a world where organizations’ digital footprint is constantly changing and attackers regularly capitalize on security failings in exposed IT assets, making the effort to minimize your external attack surface is a no-brainer. The goal is simple: Make your organization a hard nut to crack and thus force attackers to look for easier targets. To do that, you must be able to see the entirety of your organization’s external attack surface as threat actors see it, and close as many attack paths as possible. Discovering the unknowns and reducing cyber risk An organization’s attack surface encompasses all exposure points that…

Click on the timecodes to jump to that part of the video (on YouTube) Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_OpenSourceExploitsinCloudsBigDataServices.pdf 4:18 Problem statement and exploitation timeline8:28 MapReduce and Hadoop overview, overview of open-source software based on Hadoop architecture and their vulnerabilities14:15 Live demonstration of standing up a stack in EMR, terminology, auto-scaling risks, proper security postures for any new cloud23:50 Other security resources available to you including EyeWitness, GoWitness, and Webshot28:43 Continuation of the live demo33:58 Step by step recreation of the live demonstration with questions answered43:11 How to combat vulnerabilities in new technologies and staying ahead of…

Storm-1977 targets education sector with password spraying, Microsoft warns  |  SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 43  |  Security Affairs newsletter Round 521 by Pierluigi Paganini – INTERNATIONAL EDITION  |  African multinational telco giant MTN Group disclosed a data breach  |  CEO of cybersecurity firm charged with installing malware on hospital systems  |  JPCERT warns of DslogdRAT malware deployed in Ivanti Connect Secure  |  SAP NetWeaver zero-day allegedly exploited by an initial access broker  |  Operation SyncHole: Lazarus APT targets supply chains in South Korea  |  Interlock ransomware gang started leaking data allegedly stolen from leading kidney dialysis firm DaVita  | …

Brave has open-sourceed a new tool called “Cookiecrumbler,” which uses large language models (LLMs) to detect cookie consent notices and then community-driven reviews to block those that won’t break site functionality. The Brave browser has been blocking cookie consent banners by default on all websites since 2022 but found that blocking consent banners may cause website problems that severely disrupt and degrade the site’s usability. “Overly broad or incorrect blocking can break essential website functionality, from checkout flows to layout problems,” explains Brave. “We’ve encountered many issues (broken scrolling, blank pages) when a cookie consent notice block is applied indiscriminately.” Cookiecrumbler…

Tubi and other free streaming sites can seem a little too good to be true. How do they make money? Are you unknowingly watching pirated content? Is Tubi safe regarding its data collection practices? While the jury’s still out on the piracy question, Tubi has been hit with a class-action lawsuit for collecting too much user data without consent. After a $20 million settlement, Tubi has made its policies more transparent, naturally, without reducing data collection. Fortunately, you can do so yourself by using a Tubi VPN, going through the various opt-out forms in the privacy policy, and following several…

Google announced at the beginning of April that it is launching a streamlined tool that will allow business users to easily send “end-to-end encrypted” emails—an effort to address the longstanding challenge of adding additional security protections to email messages. The feature is currently in beta for enterprise users to try out within their own organization. It will then expand to allow Google Workspace users to send end-to-end encrypted emails to any Gmail user. By the end of the year, the feature will allow Workspace users to send the more secure emails to any inbox. Email spam and digital fraud researchers…

Click on the timecodes to jump to that part of the video (on YouTube) Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_SILENTTRINITYIndepthDemo.pdf 1:07 Quick review of SILENTTRINITY functions, an overview of Bring your own Interpreter (BYOI) capabilities, BYOI payload 7:08 BYOI/SILENTTRINITY in a nutshell, advantages vs. disadvantages 16:53 Overview of the almost 50 new modules that have been incorporated, live demo 38:12 Q&A on live demo 55:48 Helpful links and Closing Thoughts This webcast was originally recorded live on October 1st, 2019 with John Strand and Marcello Salvati. If you’re not familiar with SILENTTRNIITY: it’s an open-source modern, asynchronous, multiplayer & multiserver…

AI is transforming cybersecurity on both sides of the battle. As threat actors use AI to enhance and amplify their attacks, the Blue Teams responsible for identifying security threats in the operating environment are exploring how to leverage large language models (LLMs) to up their own games. LLMs show great promise for helping defenders, so it’s no wonder that teams are actively looking for ways to leverage them to help them do their jobs better and faster. However, AI is not a magic solution. For Blue Teams to get the most out of the technology, they must first understand what…

Somos Inc., a vendor of connected device security intelligence services, identity management, and fraud prevention, announced its partnership with Finite State, an IoT security organization providing comprehensive software risk management solutions. This collaboration aims to integrate Finite State’s powerful binary and source code analysis capabilities with SomosID, enhancing its IoT-connected asset registry’s ability to deliver deeper, device-level metrics.  As regulatory requirements for IoT security continue to evolve — including NIS2, the Cyber Resilience Act (CRA) and U.S. federal mandates — organizations are facing increasing pressure to ensure device integrity, vulnerability management and compliance. Through this partnership, SomosID and Finite State…