Author: HackWatchit
In today’s digital age, online payment platforms like PayPal have become essential tools for our everyday transactions. Unfortunately, they’ve also become prime targets for cybercriminals looking to steal personal information and money. McAfee Labs has uncovered a concerning trend with a spike in PayPal-related scams, with February 2025 seeing a dramatic seven-fold increase in fraudulent emails compared to January. The Current PayPal Scam Landscape While PayPal works diligently to protect its users, scammers are constantly evolving their tactics. The recent surge has been traced to a single, highly effective campaign where attackers send official-looking emails with “Action Required” warnings, demanding…
In my , I have spent a lot of time talking about the technical aspects of an Image Classification problem from data collection, model evaluation, performance optimization, and a detailed look at model training. These elements require a certain degree of in-depth expertise, and they (usually) have well-defined metrics and established processes that are within our control. Now it’s time to consider… The human aspects of machine learning Yes, this may seem like an oxymoron! But it is the interaction with people — the ones you work with and the ones who use your application — that help bring the technology to life and provide a…
The U.S. Cyberspace Solarium Commission (CSC) 2.0 observed in its latest report that the growing frequency and sophistication of cyber threats targeting the nation’s critical infrastructure, including high-profile attacks on transportation and industrial sectors, underscore the urgent need to strengthen aviation cyber defenses. It provides an overview of current federal government efforts, led by the Federal Aviation Administration (FAA) and Transportation Security Administration (TSA) to address the cybersecurity challenges in the subsector. In a report titled ‘Turbulence Ahead: Navigating the Challenges of Aviation Cybersecurity,’ the CSC 2.0 report highlighted that the U.S. aviation subsector is a highly interconnected system, including…
Russian APT group Storm-2372 employs device code phishing to bypass Multi-Factor Authentication (MFA). Targets include government, technology, finance, defense, healthcare. Cybersecurity researchers at SOCRadar have discovered a new attack tactic used by the notorious Russian state-backed advanced persistent threat (APT), Storm-2372. According to SOCRadar’s research, shared with Hackread.com, Storm-2372 can now break into online accounts of major organizations without trying to guess passwords. This is achieved through a method called “device code phishing,” which helps them get around even strong security measures like Multi-Factor Authentication (MFA). Device Code Phishing takes advantage of the way some devices, like smart TVs, connect…
Smart meters are essential to smart grids, empowering utilities and smart grid managers to provide consumers and energy providers with real-time energy consumption data, transparent billing, and demand side management. Nevertheless, despite the many benefits of smart meters, they, including the larger smart grid, are critical infrastructure, making them ideal targets for hackers. Cyberattacks are growing worldwide, with attacks against critical infrastructure being some of the most prevalent. Research from the International Energy Agency (IEA) shows that cyberattacks aimed at the energy sector, with critical infrastructure, including gas, water and especially power utilities, have been on the rise since 2018. For this…
The upcoming revival of tech entrepreneur and investor Kevin Rose’s social news site Digg has a crypto connection, as the social news platform is using embedded wallet platform Privy as an account authenticator for its revamped launch.Privy is currently utilized in other popular Web3 applications like NFT marketplace OpenSea and token launchpad Pump.fun, allowing users to create a crypto wallet with just an email. That abstracts away technical complexities like seed phrases that have been barriers to adoption. “Privy gives us all the modern and legacy authentication systems we’d like to support. Embedded wallets are a future-proof feature we’d like to…
Microsoft’s on-again, off-again rollout of its controversial Ai-powered Recall feature for its Copilot+ PCs is back on again, at least for those in the Windows Insider Release Preview channel.Windows Recall is one of more than dozen new features that will gradually come out in the Windows 11 Build 26100.3902, the IT giant said in a release note this week. Microsoft’s Windows Insider program team pitched the same capabilities that the company has been promoting for almost a year and – executives hope – quell the security and privacy concerns it generated in 2024.The memory feature is designed to give users quick…
Western Sydney University (WSU) announced two security incidents that exposed personal information belonging to members of its community. WSU is a prominent Australian institution offering various undergraduate, postgraduate, and research programs across multiple disciplines. It serves a student body of 47,000 and employs over 4,500 permanent and seasonal staff, operating with an annual budget of approximately $600 million. One of the incidents disclosed concerns the compromise of one of the University’s single sign-on (SSO) systems between January and February 2025. This breach has reportedly led to the unauthorized access of demographic, enrollment, and progression information for approximately 10,000 current and former students. The…
Jordan Drysdale // UPDATES! October 30, 2023There’s been an additional update for Sysmon! Event ID 29!Another Event ID (EID) was added to the Sysmon service. This event ID followed the same incremental ID scheme and landed on EID29. Like the previous update, this update has been echo’d to the end of this article. December 22, 2022 So – there have been some changes to Sysmon and this blog needed polishing. The latest Event IDs and descriptions are now included for Sysmon 26, File Delete Detected, Sysmon 27, File Block Executable, and Sysmon 28, File Block Shredding. All you have to do…