Author: HackWatchit

In a rather clever attack, hackers leveraged a weakness that allowed them to send a fake email that seemed delivered from Google’s systems, passing all verifications but pointing to a fraudulent page that collected logins. The attacker leveraged Google’s infrastructure to trick recipients into accessing a legitimate-looking “support portal” that asks for Google account credentials. The fraudulent message appeared to come from “no-reply@google.com” and passed the DomainKeys Identified Mail (DKIM) authentication method but the real sender was different. Fake email with Google’s DKIM stamp Nick Johnson, the lead developer of the Ethereum Name Service (ENS), received a security alert that…

In this webcast, we will cover what we can do if we think there is a breach on our network. We will cover live forensics, cool PowerShell scripts, network, and event log analysis, cool IR spreadsheets, and checklists. We will also be covering the status of our ELK project for reviewing Event ID 3 from Sysmon. So, a lot… Yep… A crazy amount. Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_ThinkYoureCompromised.pdf 00:00 – Intro 00:47 – “Ok, But Why” 02:17 – Have It The Wrong Way 04:35 – Have It The Right Way 06:58 – Lego My Incident Response…

A new report from Cyble reveals that hacktivists are increasingly targeting critical infrastructure installations, shifting beyond traditional tactics such as DDoS attacks and website defacements. This comes as they are adopting more sophisticated and destructive methods, including ransomware and attacks specifically designed to disrupt critical systems. “Pro-Russian hacktivists were the most active in the first quarter, led by NoName057(16), Hacktivist Sandworm, Z-pentest, Sector 16, and Overflame. The groups primarily targeted NATO-aligned nations and Ukraine supporters,” according to a recent blog post. “Russia-linked groups are increasingly targeting critical infrastructure. Hacktivist attacks on Industrial Control Systems (ICS) and Operational Technology (OT) surged…

Cyber hackers have widely adopted a simple but effective method of gaining access to targets’ data. They use phishing to harvest credentials, then sign on as trusted users. That’s where a zero trust strategy comes in. By establishing a zero trust architectures, federal agencies can make it so that sign-on credentials are only part of what users need to gain access to applications and data. “To have zero trust everywhere, make it so that just by the access of getting on the network or getting in from a credential perspective doesn’t give you access to everything,” said Jose Padin, vice…

have you had a messy Jupyter Notebook filled with copy-pasted code just to re-use some data wrangling logic? Whether you do it for passion or for work, if you code a lot, then you’ve probably answered something like “way too many”. You’re not alone. Maybe you tried to share data with colleagues or plugging your latest ML model into a slick dashboard, but sending CSVs or rebuilding the dashboard from scratch doesn’t feel correct. Here’s today’s fix (and topic): build yourself a personal API.In this post, I’ll show you how to set up a lightweight, powerful FastAPI service to expose…

For years, Cushman & Wakefield’s security team knew that remote desktop protocol (RDP) access was a potential weak point, but enforcing multifactor authentication (MFA) for RDP was out of reach. The company’s legacy cybersecurity tools simply didn’t support it, leaving critical systems vulnerable to credential-based attacks. “We knew attackers target RDP as an easy entry point, but had no way to enforce MFA at scale,” said Erik Hart, CISO at Cushman & Wakefield, a global commercial real estate leader with nearly 400 offices and 52,000 employees. Learn more: Read the Cushman & Wakefield customer story This changed when the company…

Hello and welcome, my name is John Strand and in this video, we’re going to be talking about RITA, Real Intelligence Threat Analytics and how it can quickly do DNS analysis to find DNS backdoors in your environment. So once again we are using ADHD, if you want to find ADHD just go to ActiveCountermeasures.com go to projects, select ADHD and then you can download it. On that virtual machine, once you login with user ID and password of ADHD, ADHD, you’ll be able to get in, login, and then right on the desktop, you’re going to find our instructions…

School IT admins are doing tough, important work under difficult conditions. From keeping Wi-Fi stable during exams to locking down systems from phishing emails, their job is part technician, part strategist, part firefighter. But they’re stretched thin. The tools are outdated, the support is missing, and the pressure never stops. Here’s a look at what they’re dealing with and how we can help. What’s holding back school IT Most school tech teams don’t get what they need. Rather than planning upgrades or staying ahead of problems, they’re patching old systems and making do. Some still rely on outdated operating systems…

There’s nothing like the freedom of the open road when you’re on a motorcycle. But staying connected while you ride can be tough. Whether it’s for safety, directions, or just talking to a passenger or riding group, a Bluetooth motorcycle intercom can make a huge difference. It adds convenience, safety, and a lot more enjoyment to the ride. Whether you prefer solo rides through winding backroads or cruising with a group, a Bluetooth intercom in your helmet can change the experience completely. Here’s a look at what these systems do, how they work, and what to look for when choosing…