Author: HackWatchit

Most internet users are familiar with PDF files and the role they play in delivering essential documents in a transferable and readable format across various devices, such as smartphones and computers. Whether it’s a telecom bill, an image, or even a video file, PDFs are a popular choice for sharing information. Adobe, the company behind the Portable Document Format (PDF), has analyzed that more than 400 million users access PDF documents, and over 16 billion users prefer to open and edit digital documents online. However, the widespread use of PDFs has also caught the attention of cybercriminals, who have developed…

Microsoft has fixed a known issue causing authentication problems when Credential Guard is enabled on systems using the Kerberos PKINIT pre-auth security protocol. According to Redmond, these authentication issues impact both client (Windows 11, version 24H2) and server (Windows Server 2025) platforms, albeit only in some niche scenarios. On affected systems, users experience problems because the passwords aren’t rotating correctly when using the Identity Update Manager certificate/Pre-Bootstrapping Key Initialization (PKINIT) protocol. However, because Kerberos Authentication is most commonly used on enterprise endpoints, home devices are likely not impacted by this known issue. “With this issue, devices fail to change their…

WhatsApp fixed a spoofing flaw that could enable Remote Code Execution Pierluigi Paganini April 08, 2025 WhatsApp addressed a flaw, tracked as CVE-2025-30401, that could allow attackers to trick users and enable remote code execution. WhatsApp released a security update to address a vulnerability, tracked as CVE-2025-30401, that could let attackers trick users and enable remote code execution. The spoofing flaw impacts WhatsApp for Windows before version 2.2450.6. An attacker could exploit the vulnerability by sending a file with a fake MIME type, tricking users into thinking it’s safe (e.g., an image), while it runs malicious code. “A spoofing issue…

Originally Aired on March 22, 2021 Articles discussed in this episode: The post Talkin’ About Infosec News – 3/22/2021 appeared first on Black Hills Information Security, Inc..

April 2025 Patch Tuesday is here, and Microsoft has delivered fixes for 120+ vulnerabilities, including a zero-day (CVE-2025-29824) that’s under active attack. CVE-2025-29824 CVE-2025-29824 is a user-after-free vulnerability in the Windows Common Log File System (CLFS) that can be – and is being – exploited by attackers to elevate their privileges to SYSTEM on previously compromised Windows machines. “CLFS is no stranger to Patch Tuesday – since 2022, Microsoft has patched 32 CLFS vulnerabilities, averaging 10 each year, with six exploited in the wild. The last CLFS zero-day flaw exploited in the wild was patched in December 2024 (CVE-2024-49138),” Satnam…

The RSA Conference is where the cyber security world comes together, and this year, Check Point’s presence will be greatly felt. From breakthrough AI defenses to exclusive executive gatherings, we’re bringing innovation, insight, and hands-on experiences to the show floor. Join us as we showcase how cyber security is evolving to meet the demands of a hyperconnected world in the era of AI. Here are six reasons you won’t want to miss visiting us at Booth #N-6072 at RSAC 2025: 1. AI-Powered Security in Action Experience live demonstrations of Check Point’s AI-powered, cloud-delivered cyber security solutions—built to protect the hyperconnected…

The U.S. Department of Homeland Security (DHS) has released a new blog post spotlighting the vital role of Behavioral Threat Assessment and Management (BTAM) teams in preventing acts of violence and supporting individuals in crisis across American communities. In the post, DHS details how BTAM teams — multidisciplinary groups that include law enforcement, mental health professionals, educators, and community leaders — intervene early when individuals exhibit concerning behavior, often long before a criminal threshold is reached. These teams evaluate the level of risk and connect individuals with resources, helping to resolve issues through nonviolent, constructive means. A 2021 case from…

The traditional Intrusion Detection Systems (IDS) have depended on rule-based or signature-based detection, which are challenged by evolving cyber threats. Through the introduction of Artificial Intelligence (AI), real-time intrusion detection has become more dynamic and efficient. Today we’re going to discuss the various AI algorithms that can be investigated to identify what works best when it comes to identifying anomalies and threats in firewall security. Exploring AI Algorithms for Intrusion Detection Random Forest (RF) is a machine learning algorithm that generates several decision trees and aggregates their predictions in order to classify network traffic as malicious or normal. RF is extremely popular in IDS due to its fast processing, interpretability, and ability to remove false positives. RF-based firewalls can make data-driven security decisions at high speed without compromising accuracy. Support Vector Machines (SVM) operate by identifying the optimal hyperplane to differentiate between attack traffic and…

Ben Bowman is a Security Analyst at Black Hills Information Security. He graduated in 2024 with a degree in cyber operations. Ben conducts research as well as tool development outside of testing. As attackers, we often have one goal: dig as deep and as fast as you can. But what happens when you hit a wall with nowhere else to go? Memory forensics may provide a way out. What if you get access to ESXi and all you can do is take snapshots? You can’t add yourself to the ESXi domain group, you can’t find any unlocked computers… so now…