Author: HackWatchit
Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA), was fired by Donald Trump in 2020 for publicly affirming that the presidential election was secure and free from widespread fraud. Fast-forward to April 2025: Trump, now back in the White House, issued an executive order revoking Krebs’ security clearances and ordering a federal investigation into his conduct, specifically targeting both Krebs and his employer, SentinelOne. The order also suspended clearances for other SentinelOne employees and threatened the company’s ability to do business with the government. Krebs responded by resigning from SentinelOne to fight the administration’s campaign…
In a creative twist on traditional panel discussions, Industrial Cyber hosted a lively and engaging webinar on the state of industrial cybersecurity in 2025 on Wednesday (recording here). Framed as a game show, the event featured thought leaders Jay Williams, CEO of Industrial Defender, Bill Moore, chief executive officer and founder at Xona Systems, and Debbie Lay, principal sales engineer at TXOne Networks, who tackled pressing challenges in the field through a dynamic, audience-driven format. The interactive session drew insights from real-world experience and audience polls, offering a candid look at how industrial cybersecurity is evolving in an increasingly complex…
Apple has released emergency security updates for iOS/iPadOS, macOS, tvOS and visionOS that fix two zero-day vulnerabilities (CVE-2025-31200, CVE-2025-31201) that have been exploited “in an extremely sophisticated attack against specific targeted individuals on iOS.” CVE-2025-31200 and CVE-2025-31201 CVE-2025-31200 affects CoreAudio, an API Apple devices use for processing audio. The memory corruption vulnerability can be triggered with a maliciously crafted media file: when the audio stream in it is processed, it allows attackers to execute malicious code. CVE-2025-31201 is an issue in RPAC (Return Pointer Authentication Code), a security feature that aims to thwart return-oriented programming attacks and similar code reuse…
John Strand // Hello all! I wanted to take a few moments and share what we have been up to in conjunction with MetaCTF. We have built a cyber range! https://www.blackhillsinfosec.com/services/cyber-range/ Yes, I know very well that this is not interesting. However, there are a couple of things that are pretty neat about it. First, it is free with every single WWHF training purchase. Please see a full list of our online training here:https://wildwesthackinfest.com/deadwood/training/ We really hate it when training has labs that are awesome, but just while you are in class. We also think there is a need to…
On Wednesday, CISA warned federal agencies to secure their SonicWall Secure Mobile Access (SMA) 100 series appliances against attacks exploiting a high-severity remote code execution vulnerability. Tracked as CVE-2021-20035, this security flaw impacts SMA 200, SMA 210, SMA 400, SMA 410, and SMA 500v (ESX, KVM, AWS, Azure) devices. Successful exploitation can allow remote threat actors with low privileges to execute arbitrary code in low-complexity attacks. “Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a ‘nobody’ user, which could potentially lead to code execution,” SonicWall explains in an…
Highlights Priority Technology CEO Tom Priore tells Karen Webster that bundled financial services help small businesses accelerate cash flow and optimize working capital. Small businesses need a range of credit and payment options to keep supplier relationships strong. Regardless of the macro environment, small businesses have an optimistic mindset that can help them thrive. The tariffs were on, then they were paused, and at the moment, the United States trade war is focused on China. Although some business owners are girding for a recession, any such scenario may be relatively shallow, as the Federal Reserve can cut rates from still-high…
Apple released emergency updates for actively exploited iOS, iPadOS and macOS flaws Pierluigi Paganini April 17, 2025 Apple released emergency updates to fix iOS, iPadOS & macOS vulnerabilities actively exploited in sophisticated attacks. Apple released out‑of‑band security updates to address two vulnerabilities, tracked as CVE-2025-31200 and CVE-2025-31201, impacting iOS, iPadOS & macOS. The company confirmed that the flaws have been exploited in a small number of “extremely sophisticated” attacks against iOS targets. Below are the descriptions of the two vulnerabilities: CoreAudio (CVE-2025-31200) – The vulnerability is a memory corruption issue that was addressed with improved bounds checking. Processing an audio…
Many NVIDIA Shield users face common VPN connection issues that can prevent streaming, gaming, or browsing securely. This comprehensive troubleshooting guide addresses the most frequent problems and provides simple solutions to get your VPN working smoothly on your NVIDIA Shield device. Common VPN issues with NVIDIA Shield Several things can go wrong with your NVIDIA Shield VPN. Here are the most common issues: Connection failures One of the most frequent problems is when your VPN won’t connect. This frustrating issue can happen for several reasons and often leaves users uncertain about how to proceed. Server overload is a common culprit…
Palo Alto, California, April 16th, 2025, CyberNewsWire SquareX researchers Jeswin Mathai and Audrey Adeline will be disclosing a new class of data exfiltration techniques at BSides San Francisco 2025. Titled “Data Splicing Attacks: Breaking Enterprise DLP from the Inside Out”, the talk will demonstrate multiple data splicing techniques that will allow attackers to exfiltrate any sensitive file or clipboard data, completely bypassing major Data Loss Protection (DLP) vendors listed by Gartner by exploiting architectural vulnerabilities in the browser. DLP is a core pillar of every enterprise security stack. Data breaches can result in severe consequences including IP loss, regulatory violations, fines,…