Author: HackWatchit

Steam was the most imitated brands by phishers in the first quarter of 2025, followed by Microsoft and Facebook/Meta, Guardio researchers have revealed. “Historically, the #1 spot has been dominated by the usual suspects – big tech companies like Meta, Microsoft, or even USPS. But this quarter, it’s Steam, and by a significant margin. Scammers have been targeting the massive gaming community by impersonating Steam to warn users about supposed account issues, like payment failures or suspicious login attempts. These fake messages are designed to trick victims into entering their login credentials on counterfeit websites, which then steal their account…

OT Cyber Direct announced the launch of its digital marketplace, designed to provide small and medium-sized businesses (SMBs) with tested and cost effective Operational Technology (OT) security applications. The new platform, OTCyberDirect.com, aims to help businesses reduce risk to their industrial networks by offering a curated selection of cost effective cybersecurity solutions that are easy to procure, install, and manage.  OTSecurityDirect has partnered with security vendors to offer a variety of OT security products, spanning multiple disciplines, including Fortinet for Perimeter Monitoring, OT Dashboards and Industrial Firewalls; Blastwave for OT Network Segmentation and Remote Access; IOT365 for AI-powered OT Network…

Here’s a look at the most interesting products from the past week, featuring releases from 1touch.io, Bitsight, Bluefin, CyberQP, and Exabeam. Exabeam Nova accelerates threat detection and response By correlating multiple detections within a case and using a proprietary threat classification framework, Exabeam Nova distinguishes between compromised insiders, malicious insiders, and undetermined threats with precision, enabling security teams to quickly identify, investigate and respond to threats with greater efficiency and accuracy. CyberQP launches Zero Trust Helpdesk Security Platform CyberQP has launched Zero Trust Helpdesk Security Platform, combining QGuard for Privileged Access Management (PAM) and QDesk for End-User Access Management (EUAM).…

There has been a huge explosion of different free and open-source options for EDR in the security space. Which is nice because the commercial offerings are stupid expensive. In this Black Hills Information Security (BHIS) webcast, we look at OpenEDR, Elastic, and Velociraptor. With all these great options, there is no reason your organization should not have one of these offerings. Further, they are essential for any IR gig you may do. You may be a shop that is looking at commercial offerings, however, you should always look at the free offerings first. Remember, you are not paying for what…

39M secrets exposed: GitHub rolls out new security tools Pierluigi Paganini April 04, 2025 GitHub found 39M secrets leaked in 2024 and launched new tools to help developers and organizations secure sensitive data in code. Microsoft-owned code hosting platform GitHub announced the discovery of 39 million secrets leaked in 2024. The exposure of this sensitive information poses a serious risk to organizations, as malicious actors are ready to exploit it in attacks. Developers frequently expose secrets like API keys, often underestimating the risk. Attackers exploit even “low-risk” leaks for lateral movement. Storing secrets in git history increases vulnerability, and accidental…

Over the weekend, a massive wave of credential stuffing attacks hit multiple large Australian super funds, compromising thousands of members’ accounts. The Association of Superannuation Funds of Australia (ASFA), Australia’s advocacy body for the superannuation industry, said today that “a number of members were affected” even though the “majority of the attempts were repelled.” Reuters has learned from a source familiar with the matter that over 20,000 accounts were breached in this massive wave of attacks targeting Australia’s superannuation industry, with some members reportedly losing some of their savings. Since the weekend attacks, some of the country’s largest profit-to-member superannuation…

AutonomyAI, a company focused on enhancing front-end software development for businesses, has announced its launch from stealth with $4 million in pre-seed funding, with participation from Inbound Capital, Gilad Shany of IoN Partners and Vikram Makhiija, Senior Director at Google Cloud Security, among others. Research firm IDC predicts that by 2028, the market for AI-supporting technology investments will reach $749 billion, with 67% of the $227 billion projected spend for 2025 going towards business integrations such as AI agents. This figure surpasses cloud and digital service provider investments for the first time. Speaking at Davos 2025, Salesforce CEO Marc Benioff…

“Putting aside for a moment that classified information should never be discussed over an unclassified system, it’s also just mind-boggling to me that all of these senior folks who were on this line and nobody bothered to even check, security hygiene 101, who are all the names? Who are they?” US senator Mark Warner, a Virginia Democrat, said during Tuesday’s Senate Intelligence Committee hearing.According to The Atlantic, 12 Trump administration officials were in the Signal group chat, including vice president JD Vance, secretary of state Marco Rubio, and Trump adviser Susie Wiles. Jabbour adds that even with ​​decisionmaking authorities present…

I love writing. You may notice that if you follow me or my blog. For that reason, I am constantly producing new content and talking about Data Science and Artificial Intelligence. I discovered this passion a couple of years ago when I was just starting my path in Data Science, learning and evolving my skills. At that time, I heard some more experienced professionals in the area saying that a good study technique was practicing new skills and writing about it somewhere, teaching whatever you learned. In addition, I had just moved to the US, and nobody knew me here.…