Author: HackWatchit

Drawing on two decades of frontline disaster-response experience, Meghan McPherson has created her debut children’s book, “Sammie’s Stormy Night.” This thoughtful story follows a young puppy named Sammie as he and his friends prepare for, experience, and recover from a powerful hurricane that transforms their small town. When familiar sights vanish after the storm, Sammie must navigate his feelings of uncertainty and fear. Through this gentle narrative, children learn that while disasters may change our surroundings, the support of family and friends remains constant. “After seeing so many kids struggle after the storms I’ve worked and/or lived through, I realized…

Are You Ready to Embrace the Future of Secrets Vaulting? I often get asked: “What does the future hold for secrets vaulting?” It’s a valid question. With organizations continuously transitioning to the cloud and the prevalence of digital identities growing, secrets management is becoming the cornerstone of any robust cybersecurity strategy. But why should we be so optimistic about the future of secrets vaulting? Let’s delve into the myriad benefits it entails. A New Era for Secrets Management: The Power of NHIs Non-Human Identities, or NHIs, are machine identities that play a crucial role. They are unique identifiers, much like…

A hacker breached the GitLab repositories of multinational car-rental company Europcar Mobility Group and stole source code for Android and iOS applications, as well as some personal information belonging to up to 200,000 customers. The actor tried to extort the company by threatening to publish 37GB of data that includes backups and details about the company’s cloud infrastructure and internal applications. Europcar Mobility Group is a subsidiary of Green Mobility Holding that operates the Europcar, Goldcar, and Ubeeqo brands with a diverse offering of compact cars, luxury vehicles, vans, and trucks. The company’s customer base is substantial, spread across 140 countries in…

Joff Thyer // If you are a fan of web application pen testing, you have been spoiled with a lot of easy pickings over the years.  We all love our interception proxies, and I know a lot of us are huge fans of the great work that PortSwigger has done with Burp Suite over the years.  Having said this, testing apps in the age of modern web applications that have Document Object Model (DOM) focused frameworks is a little bit different than testing a traditional HTML-based app.   For the remainder of this blog post, please make the assumption that I am referring to Angular versions 2 and up which…

Navigating the complexities of AI security requires more than just traditional measures. As we dive deeper into artificial intelligence, particularly large language models (LLMs), understanding the intricacies of AI penetration testing becomes indispensable.  This article will break down what AI penetration testing entails, pinpoint key vulnerabilities specific to AI and LLMs, explore various methodologies employed in this specialized area of cybersecurity, and provide a step-by-step guide on how to conduct penetration testing on LLM systems effectively. By the end of this read, you’ll be equipped with the knowledge to enhance the security of your AI applications, ensuring they are secure…

New Trend Micro research detailed cyber espionage techniques of Earth Alux, a China-linked APT group, are putting critical industries at risk. These attacks, aimed at the APAC and Latin American regions, leverage powerful tools and techniques to remain hidden while stealing sensitive data. Left undetected, the attack can maintain a foothold in the system and carry out cyber espionage. The long-term collection and exfiltration of data could lead to far-reaching consequences, such as disrupted operations and financial losses. Actively launching cyber espionage attacks against the government, technology, logistics, manufacturing, telecommunications, IT services, and retail sectors, Trend Micro said that the…

Originally Aired on May 5, 2021 Articles discussed in this episode: The post Talkin’ About Infosec News – 5/5/2021 appeared first on Black Hills Information Security, Inc..

Too Many Organizations Look to Scheduled Audits to Dictate Patching Efforts Though it may seem obvious that patches to critical vulnerabilities in IT systems need to be implemented right away, the fact remains that huge numbers of today’s enterprises tend to be slow at actually deploying them. Whether it’s a lack of resources, overtasked personnel or simply a lack of consistent processes, the ever-growing threat looms and it’s clear that criminals remain unwavering in their use of unpatched vulnerabilities as their path toward successful cyberattacks. The Risks of a Reactive vs Proactive Approach Successfully reducing security risk for any business…

For the Army to reach its goal of data centricity, it first had to address long-standing challenges with disparate and disjointed networks. It has to reduce the complexity and number of networks commanders relied on to access data to make decisions. “This is all about how we move data at echelon. Data centricity really comes in three imperatives: One, looking for robust transport across the board. Two, it’s looking for cloud enabled capabilities that we can move data at echelon. And three is moving data on a modern security architecture, which we label as zero trust,” Lt. Gen. Jeth Rey,…