Author: HackWatchit

David Fletcher // With so many organizations transitioning to remote work in order to stem the tide of COVID-19 infections, we wanted to cover some of the configuration elements you should be considering to ensure that your network perimeter is properly protected. Employee remote access is often a target for attackers looking to gain initial access into an organization’s network. With authenticated remote access, an attacker may be able to run roughshod through your environment in a very short time. Multi-Factor Authentication As employees are transitioned to work from home, it is critical to ensure that your organization is using…

As cyber threats grow faster and more widespread, enterprises of all sizes need flexible, scalable, and easy-to-manage security solutions backed by a strong network. Today’s rapidly evolving threat landscape demands enterprise firewalls that can adapt to complex environments while providing robust protection against sophisticated attacks. Today, we are proud to announce that Check Point was named a Leader and the only Outperformer in the GigaOm Radar for Enterprise Firewalls. The report recognized Check Point for its continuous development of new features and forward-thinking roadmap, as well as its strong focus on AI and performance optimizations. This report evaluates the 14…

Kimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and Japan Pierluigi Paganini April 21, 2025 Researchers spotted a new North Korea-linked group Kimsuky ‘s campaign, exploiting a patched Microsoft Remote Desktop Services flaw to gain initial access. While investigating a security breach, the AhnLab SEcurity intelligence Center (ASEC) researchers discovered a North Korea-linked group Kimsuky ‘s campaign, tracked as Larva-24005. Attackers exploited an RDP vulnerability to gain initial access to the target systems. “In some systems, initial access was gained through exploiting the RDP vulnerability (BlueKeep, CVE-2019-0708). While an RDP vulnerability scanner was found in the compromised…

Image by author explores how browser-based computational notebooks — particularly the WLJS Notebook — can transform static slides into dynamic, real-time experiences. This approach isn’t limited to presentations; you can prepare interactive lecture notes for students or colleagues and publish it on web. For data scientists, physicists, it highlights new ways to communicate models, simulations, and visualizations, making complex ideas more intuitive and engaging. Is a PDF Enough? Animations, bells and whistles, especially the kind that were popular in PowerPoint 15–20 years ago, have largely taken a backseat. Add to this the compatibility issues between LibreOffice and MS Office (even between versions for Windows and…

Fake Booking.com emails trick hotel staff into running AsyncRAT malware via fake CAPTCHA, targeting systems with remote access trojan. A new phishing campaign is targeting hotel staff with fake Booking.com emails, tricking victims into executing malicious commands on their own systems. The scam appears well-planned, combining social engineering with the end aim to infect and compromise hotel networks with AsyncRAT. It Starts with a Convincing Email The attack begins with a message that appears to come from Booking.com. The email claims a guest has left behind important personal belongings and urges the hotel manager to click a button labelled “View…

In supply chain operations, GenAI is gaining traction. But according to Logility’s Supply Chain Horizons 2025 report, many security leaders remain uneasy about what that means for data protection, legacy tech, and trust in automation. The survey of 500 global supply chain leaders shows that 97% are already using some form of GenAI. But only a third are using tools designed specifically for supply chain tasks. And nearly half (43%) say they worry about how their data is used or shared when applying GenAI. Another 40% don’t trust the answers it gives. For CISOs, these findings are a red flag.…

Microsoft confirms that the weekend Entra account lockouts were caused by the invalidation of short-lived user refresh tokens that were mistakenly logged into internal systems. On Saturday morning, numerous organizations reported that they began receiving Microsoft Entra alerts that accounts had leaked credentials, causing the accounts to be locked out automatically. Impacted customers initially thought the account lockouts were tied to the rollout of a new enterprise application called “MACE Credential Revocation,” installed minutes before the alerts were issued. However, an admin for one of the impacted organizations shared an advisory sent by Microsoft stating that the issue was caused by the…

The team at Black Hills Information Security and Wild West Hackin’ Fest had to pivot from doing an in-person information security conference in San Diego to a 100% virtual conference with 6 days of notice. We had a little bit of experience doing a hybrid in-person/virtual conference in November 2019 (with 10 days’ notice). The response from the 400+ attendees about the virtual conference was overwhelmingly positive. We did it and you can do it, too. In this webcast, we discuss how it all happened, including how we ended our agreement with our venue. We talk about all the things…

Upexi Inc.’s shares soared more than 630% on April 21 after the Nasdaq-listed company announced plans to build a Solana (SOL)-based crypto treasury using newly raised funds.The $100 million private investment in public equity (PIPE) was anchored by GSR, a leading crypto trading and investment firm, and included backing from Maelstrom Capital, Delta Blockchain Fund, Delphi Ventures, Hivemind Ventures, Borderless Capital, and White Star Capital.The move marks a significant pivot into digital asset management for the firm, which is known for specializing in the development, manufacturing, and distribution of consumer products.Institutional push into SolanaUpexi’s stock jumped from $2.30 at the…