Author: HackWatchit
During remote red team exercises, it can be difficult to keep from leaking information to the target organization’s security team. Every interaction with the target’s website, every email sent, and every network service probed leaves some trace that the red team was there. Mature blue teams can correlate those pieces of information to identify red team actions and infrastructure, and use that information to either block the red team outright or execute deception operations to frustrate further attacks. In this Black Hills Information Security (BHIS) webcast, Michael will discuss common sources of data leakage during remote red team exercises and…
The Defense Department has a challenge: How can servicemembers perform command and control using edge devices without risking the enterprise? The linchpin in obtaining that capability is zero trust, said Jared Shepard, president and CEO of Hypori. In fact, Shepard said, the importance of zero trust for edge devices extends to nearly every domain, not just that of DoD. “The world is changing. If you look at internet traffic now, there’s more internet traffic — significantly so — generated by mobile devices,” Shepard said during Federal News Network’s DoD Modernization Exchange. “People spend more time on their mobile devices than…
We’re excited to share that CrowdStrike Falcon® Cloud Security now offers enhanced tools to help secure artificial intelligence (AI) development, simplify AI security posture management, and quickly respond to AI threats. These updates have been developed in collaboration with NVIDIA since August 2024. As AI rapidly transforms how industries operate, it’s also creating new security challenges. The cloud is essential to AI development, and the demand for cloud resources is growing: The cloud AI market is projected to grow from $102.09 billion in 2025 to $589.22 billion by 2032.1 This growth in cloud workloads is expanding the attack surface —…
Cybercriminals are always finding new ways to trick people, and one of the latest scams on the rise is called vishing, short for voice phishing. Unlike email scams (known as phishing), vishing happens over the phone. Recent studies have highlighted a dramatic escalation in vishing attacks. The 2025 CrowdStrike Global Threat Report documented a 442% surge in vishing incidents from the first to the second half of 2024. Additionally, research from Enea indicates that vishing, smishing, and phishing attacks have increased by 1,265% since the launch of ChatGPT. John Mc Loughlin, cybersecurity expert and CEO of J2 Software, says this…
a home, whether you’re an everyday buyer looking for your dream house or a seasoned property investor, there’s a good chance you’ve encountered automated valuation models, or AVMs. These clever tools use massive datasets filled with past property transactions to predict the value of your potential new home. By considering features like location, number of bedrooms, bathrooms, property age, and more, AVMs use AI to learn associations with sales prices. A rapid and low-cost appraisal of any home sounds great on paper, and in many cases it is great. However, with every price prediction comes a level of uncertainty, and…
Originally Aired on March 24, 2021 Articles discussed in this episode: The post Talkin’ About Infosec News – 3/24/2021 appeared first on Black Hills Information Security, Inc..
Hillstrong Group Security, an emerging leader in operational risk intelligence (ORI), announced on Monday the appointment of William Noto as chief revenue officer. The hire comes as Hillstrong scales its SaaS-based ORI platform to meet the rising demands of global manufacturers and critical infrastructure operators navigating an increasingly high-stakes threat landscape. Noto brings more than 20 years of industrial cybersecurity and go-to-market expertise, having held pivotal roles at Claroty, Fortinet, and GE Digital. He is widely regarded for his ability to transform technical complexity into commercial success—driving revenue surges, forging strategic alliances, and launching industry-first solutions across the OT cybersecurity…
The controversial case of the threat actor EncryptHub Pierluigi Paganini April 07, 2025 Microsoft credited controversial actor EncryptHub, a lone actor with ties to cybercrime, for reporting two Windows flaws. Microsoft credited the likely lone actor behind the EncryptHub alias (also known as SkorikARI) for reporting two Windows security flaws, highlighting a “conflicted” figure balancing ethical cybersecurity work with cybercriminal activity. Outpost24 KrakenLabs published a detailed analysis of the threat actor that was born in Ukraine. The man fled his hometown a decade ago and resettled near Romania. After years of low-profile IT work and self-study, his activity paused in…
Cybersecurity researchers from CYFIRMA have revealed a new version of Neptune RAT, a remote administration tool targeting Windows devices. Marketed on platforms like GitHub, Telegram, and YouTube with claims of being the “Most Advanced RAT,” the malware is attracting both newcomers to cybercrime and seasoned hackers looking for a ready-made tool. What Is Neptune RAT? Neptune RAT is written in Visual Basic .NET and is designed to take control of a victim’s Windows computer. Although its creator says the software is provided for “educational and ethical purposes,” the tool’s capabilities suggest otherwise. Designed to steal user credentials, replace cryptocurrency wallet…