Author: HackWatchit
The crypto and NFT gaming space is busier than ever lately, what with prominent games starting to release, token airdrops piling up, and a seemingly constant array of other things happening at all times. It’s a lot to take in!Luckily, Decrypt’s GG is all over it. And if you need a quick way to get caught up on the latest moves around crypto video games, we’re happy to present This Week in Crypto Games.Our weekend roundup serves up the biggest news from the past week, along with a few other tidbits you might have missed. We also showcase a few…
Authors/Presenters: Grant Dobbe, Daemon Tamer, Phil Young Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel. Permalink *** This is a Security Bloggers Network syndicated blog from Infosecurity.US authored by Marc Handelman. Read the original post at: https://www.youtube-nocookie.com/embed/ySBl0CbGBsI?si=ZPIjaGC4UslHTUg3
In a chilling reminder of the growing cyber threats to the healthcare industry, Laboratory Services Cooperative (LSC), a U.S. lab testing provider, confirmed a major data breach that compromised the personal and medical data of 1.6 million individuals. The October 2024 cyberattack, which was disclosed just yesterday, exposed highly sensitive information ranging from Social Security numbers to lab results and insurance details. As experts weigh in, it’s clear this breach has far-reaching consequences—not only for the affected individuals but for the very integrity of healthcare infrastructure across the country. The Scope of the Breach The compromised data is extensive and…
Originally aired on November 11, 2020 Articles discussed in this episode: Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-What-You-Can Training Available live/virtual and on-demand
The battle didn’t begin today, and it’s not ending anytime soon, as cyber threats are changing at a rate never seen before. Today, attackers are getting more and more creative, utilizing tools like AI to exploit vulnerabilities at a rate faster than security teams can identify and address them. Meanwhile, security teams are stuck drowning in intelligence reports, red team findings, and endless data streams – expected to extract relevant insight, prioritize risks, and then roll out detections before the next hits. But by the time they reach that point, attackers are already ten steps ahead. Over 60% of organizations…
Wyden to block CISA nominee over telecom security ‘cover up’ Sen. Ron Wyden (D-Ore.) says CISA is withholding a crucial report on cyber gaps in U.S. communications networks, even after last year’s “Salt Typhoon” hacks. Justin Doubleday@jdoubledayWFED April 9, 2025 6:02 pm 3 min read One senator plans to block the nominee to lead the Cybersecurity and Infrastructure Security Agency until CISA releases a report on U.S. telecommunications security. Sen. Ron Wyden (D-Ore.) today announced his intent to object to considering Sean Plankey to serve as director of CISA. President Donald Trump nominated Plankey, a former Energy Department official, in…
Jordan Drysdale // TL;DR The problem with a pentester’s perspective on defense, hunting, and security: Lab demographics versus scale. If it costs $15 bucks per month per server for me to get ATP data, demo its effectiveness, provide tips, tricks, and some basic guidance to the world, this is affordable. Deploying ATP on 5,000 virtual servers on Azure is just shy of a million bucks a year, which to me, seems really expensive. But, I don’t maintain any other EDR platform, so maybe it’s cheap? I just don’t know… But, I do know that Log Analytics, Sentinel, and ATP can…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 41 | Security Affairs newsletter Round 519 by Pierluigi Paganini – INTERNATIONAL EDITION | China admitted its role in Volt Typhoon cyberattacks on U.S. infrastructure | Symbolic Link trick lets attackers bypass FortiGate patches, Fortinet warns | Attackers are exploiting recently disclosed OttoKit WordPress plugin flaw | Laboratory Services Cooperative data breach impacts 1.6 Million People | Palo Alto warns of brute-force login attempts on PAN-OS GlobalProtect gateways indicating possible upcoming attacks | Gamaredon targeted the military mission of a Western country based in Ukraine | U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities…
A new class of supply chain attacks named ‘slopsquatting’ has emerged from the increased use of generative AI tools for coding and the model’s tendency to “hallucinate” non-existent package names. The term slopsquatting was coined by security researcher Seth Larson as a spin on typosquatting, an attack method that tricks developers into installing malicious packages by using names that closely resemble popular libraries. Unlike typosquatting, slopsquatting doesn’t rely on misspellings. Instead, threat actors could create malicious packages on indexes like PyPI and npm named after ones commonly made up by AI models in coding examples. A research paper about package hallucinations…