Author: HackWatchit
In recent years, we’ve become familiar with ransomware attacks, where hackers infiltrate computer networks, encrypt files, and demand payment in exchange for restoring access. As these cybercriminal tactics evolved, attackers began stealing sensitive data in addition to encrypting it—using the threat of publishing that data on the dark web as additional leverage to extort victims. Now, the landscape appears to be shifting once again. Cybercriminals are increasingly using more public platforms—most notably, Telegram—to leak stolen information as a way to prove their hacking claims and pressure victims. This new tactic serves both as a form of retaliation and a warning…
22 Dec 2020 Informational, InfoSec 101, News, Podcasts Originally aired on December 21, 2020 Articles discussed in this episode: Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ RFID Proximity Cloning Attacks Webcast: Discussing Implications of the SolarWinds Breach(es) Looking For Something?Browse by category Select Category Alyssa Snow (7) Ashley Knowles (1) Ashley Van Hoesen (1) Author (402) Backdoors & Breaches (7) Beau Bullock (32) Ben Bowman (4) Ben Burkhart (1) Blue Team (103) Blue Team Tools (42) Brian Fehrman (19) Brian Ireland (1) Brian King (20) Bronwen Aker (1) C2 (29) Cameron Cartier (2) Carrie Roberts (5) Chris Sullo (1) Chris Traynor (2) CJ…
Microsoft is testing a new Defender for Endpoint capability that will block traffic to and from undiscovered endpoints to thwart attackers’ lateral network movement attempts. As the company revealed earlier this week, this is achieved by containing the IP addresses of devices that have yet to be discovered or onboarded to Defender for Endpoint. Redmond says the new feature will prevent threat actors from spreading to other non-compromised devices by blocking incoming and outgoing communication with devices using contained IP addresses. “Containing an IP address associated with undiscovered devices or devices not onboarded to Defender for Endpoint is done automatically…
KELA unveiled Digital Cyber Analysts, next-generation AI-powered digital employees designed to transform how security teams consume, prioritize, and act on threat intelligence. These always-on, interactive agents enhance the speed and efficiency of both enterprise security teams, government and law enforcement organizations and security service providers delivering reliable, context-rich insights in seconds that dramatically reduce analyst workload. While the industry faces an increasing cybersecurity talent shortage, combined with the proliferation of threat actors leveraging dark AI tools, KELA’s Digital Cyber Analysts help bridge the gap by enhancing analyst capacity without adding headcount. Built on KELA’s proprietary data lake and years of…
Laboratory Services Cooperative data breach impacts 1.6 Million People Pierluigi Paganini April 11, 2025 Laboratory Services Cooperative discloses a data breach from October 2024 that exposed personal and medical info of 1.6 million individuals. Laboratory Services Cooperative disclosed a data breach that impacted the personal and medical information of 1.6 million people. The Laboratory Services Cooperative (LSC) is a clinical laboratory based in Bremerton, Washington, providing diagnostic testing services primarily to Planned Parenthood centers across 31 U.S. states. Their services support reproductive health and other medical testing needs. The incident took place in October 2024, LSC is notifying impacted individuals.…
Your organization relies on a growing portfolio of SaaS applications to drive productivity. But this shift has brought with it a shadow of complexity and risk. Shadow IT, misconfigured apps, and third-party integrations now form a fragmented, often-invisible attack surface—one that many traditional security tools weren’t built to handle. That’s why we’re excited to announce that Check Point Harmony SaaS is now available on Google Cloud Marketplace. Google Cloud customers can deploy our AI-powered solution to uncover, understand, and instantly secure their SaaS ecosystem—delivering the fastest path to enterprise-grade SaaS security. Why This Matters for Google Cloud Users The integration…
AI in software development is no longer a glimpse into the future – it’s here, woven into daily workflows and it’s accelerating at a breakneck pace. According to PwC’s AI Predictions report, AI has the potential to cut software development time in half, making it no surprise that companies are eager to integrate AI into their development workflows. In fact, a 2024 GitHub and Accenture study revealed that 40% of newly committed code across enterprise customers now contains AI-assisted content. And, more tellingly, 96% of developers start relying on AI-generated suggestions immediately after installing an IDE extension, indicating that AI is no longer…
A threat actor that has been using known old FortiOS vulnerabilities to breach FortiGate devices for years has also been leveraging a clever trick to maintain undetected read-only access to them after the original access vector was locked down, Fortinet has revealed on Thursday. “[Read-only access] was achieved via creating a symbolic link connecting the user filesystem and the root filesystem in a folder used to serve language files for the SSL-VPN,” Fortinet CISO Carl Windsor explained. “This modification took place in the user filesystem and avoided detection. Therefore, even if the customer device was updated with FortiOS versions that…
This blog was written in conjunction with Wild West Hackin’ Fest. Does the news on SUNBURST and SUPERNOVA have you feeling like you’re flapping in the (Solar)Wind? Join John Strand, Jonathan Ham, and Jake Williams as they discuss the implications of the breaches in this no-FUD webcast. No, we won’t be discussing “cyber Pearl Harbor” – because lets be honest, that’s just hyperbole. Join us to learn why this is bad, but also why we assess that the sky isn’t falling. Join these three amigos to discuss breach details and actionable steps you can take in your own networks. Ready…