Author: HackWatchit

Originally aired on November 30, 2020 Articles discussed in this episode: Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-What-You-Can Training Available live/virtual and on-demand

Phishing-as-a-service (PhaaS) platform Tycoon2FA, known for bypassing multi-factor authentication on Microsoft 365 and Gmail accounts, has received updates that improve its stealth and evasion capabilities. Tycoon2FA was discovered in October 2023 by Sekoia researchers, who later reported significant updates on the phishing kit that increased its sophistication and effectiveness. Trustwave now reports that the Tycoon 2FA threat actors have added several improvements that bolster the kit’s ability to bypass detection and endpoint security protections. The first highlighted change is the use of invisible Unicode characters to hide binary data within JavaScript, as first reported by Juniper Threat Labs in February. This tactic…

Forescout has released its fifth annual Riskiest Connected Devices of 2025 report, highlighting a growing trend of vulnerabilities across the digital ecosystem. The report analyzes the five riskiest device types globally across IT, Internet of Things (IoT), Operational Technology (OT), and the Internet of Medical Things (IoMT), as well as across key industry verticals. Among the most concerning findings, IoMT devices continue to grow more vulnerable, raising significant alarms around the security of healthcare networks. Routers now represent over 50% of the most vulnerable devices, emphasizing the urgent need to strengthen network infrastructure defenses. The report also reveals a 15…

Jordan Drysdale // tl;dr Sentinel is easy! Especially when using Azure Sentinel To-Go. So, let’s do some threat research by deploying Sentinel To-Go and executing a Cobalt Strike beacon. Link: https://github.com/OTRF/Azure-Sentinel2Go Keeping up with Roberto’s (and his brother, and the OTRF contributors) is as monumental a task as his efforts to push threat research forward. The Defensive Origins team (jeez, we’re four now, and hopefully five soon) do our best to find items to improve general security posture and share them. Background:  Roberto (Cyb3rWarD0g) and several other folks at OTRF are contributing so much to the security community, researchers, and…

One of the most pressing concerns with AI adoption is data leakage. Consider this: An employee logs into their favorite AI chatbot, pastes sensitive corporate data, and asks for a summary. Just like that, confidential information is ingested into a third-party model beyond your control. Even with data loss prevention (DLP) policies, AI data leaks are challenging to prevent. If the AI system is cloud-based and employees can access it externally, companies may never know when their data is compromised. Also, most AI vendors offer more than web interfaces – they also provide programmatic access via APIs. However, APIs also…

The former CEO of Binance, Changpeng Zhao or CZ, agreed to assist prosecutors in building their case against Justin Sun, the founder of Tron, The Wall Street Journal reported on April 12. The exclusive report that cited anonymous sources familiar with the matter stated:“As part of Zhao’s plea deal, he agreed to give evidence on Sun to prosecutors.”This “arrangement” or clause of his plea deal “hasn’t previously been reported,” the report said.CZ discredits WSJ report as “hit piece”Prior to the WSJ report’s publication, CZ posted on X that he had learned that the WSJ was writing “another baseless hit piece.”…

Why is NHI Lifecycle Management Crucial? Every organization looking to assert control over its cybersecurity posture should ponder this question. Non-Human Identities (NHIs) and their secrets form the backbone of advanced cloud security control. However, the adoption of innovative NHI lifecycle management solutions is what sets successful organizations apart. When essential secure cloud environment components, these machine identities wield the key to enhanced security and compliance, efficiency, visibility, and cost savings. The Enigma of NHIs and Secrets in Cybersecurity Fundamentally, NHIs comprise encrypted passwords, tokens, or keys, the “secrets.” Together, they form unique identifiers akin to passports. They also carry…

Tens of thousands of people have achieved the OSCP certification. The OSCP is a true testament to the grit and expertise required in cybersecurity.  If you are one of the accomplished OSCP holders and you’ve climbed the ranks, transitioning from the front lines to leading or influencing your team, you’ve not only sharpened your skills but also set a standard of excellence that inspires those around you. Now, imagine amplifying that impact. Consider the powerful shift that could occur if your entire team brought the same level of insight and preparedness to the table. By championing the PEN-200 course and…

Here’s a look at the most interesting products from the past week, featuring releases from Forescout, Index Engines, Jit, RunSafe Security, and Seal Security. Jit launches AI agents to ease AppSec workload Jit has launched its new AI agents to offload specific and tedious tasks from AppSec teams such as creating risk assessments, threat models, and compliance reports; while making it easy to take action on mitigating security risk. As a result, AppSec teams can keep pace with the risks that are being introduced faster than ever due to AI code-generation tools. RunSafe Risk Reduction Analysis offers insights into memory-based…