Author: HackWatchit

Topic: Women in Digital Forensics: Leadership, Growth, and Future Trends Watch Now Abstract:  As the threat landscape continues to evolve continuously, the need for advanced digital forensics has become crucial. However, organizations today face a shortage of skilled digital forensic investigators to address the rapidly evolving threats, a challenge further exacerbated by the gender gap. This webinar focuses on the current challenges women face in digital forensic careers and highlights strategies to address both the skill shortage and gender disparity in the field. It will also highlight the experiences, challenges, and achievements of women in digital forensics and cybersecurity. Additionally,…

tokyoneon // Spoofing credential prompts is an effective privilege escalation and lateral movement technique. It’s not uncommon to experience seemingly random password prompts for Outlook, VPNs, and various other authentication protocols in Windows environments. Adversaries will abuse functionalities built into Windows and PowerShell to invoke credential popups to acquire user passwords.  As defined by the MITRE ATT&CK Framework:  “When programs are executed that need additional privileges … it is common for the operating system to prompt the user for proper credentials to authorize the elevated privileges for the task. Adversaries may mimic common operating system components to prompt users for credentials…

You’re in the middle of a sprint, juggling deadlines, debugging code, fine-tuning pipelines, and then it happens—you stumble across the perfect cybersecurity tool. It promises to eliminate secrets in logs, reduce risks in CI/CD pipelines, and save countless hours chasing security anomalies. But there’s one final boss to clear: the C-suite. Convincing leadership, especially those more attuned to balance sheets than breach reports, can feel like selling a Wi-Fi router to someone without any internet connection. Securing buy-in is not just a technical challenge. It’s a game of strategy, storytelling, and persuasion. Here’s how to win them over. 1. Lead…

Highlights New Intel CEO Lip-Bu Tan openly acknowledged Intel’s decline and called for “brutally honest” feedback, pledging to rebuild trust and transform the company with a culture rooted in engineering, speed and innovation. Tan aims to flip Intel’s outdated development model — shifting from hardware-led design to software — and AI-first approaches that start with real-world problems and work backwards. Tan is positioning the company to lead in emerging AI markets spanning cloud, generative and agentic AI and robotics — while shedding non-core businesses. Intel’s new CEO, Lip-Bu Tan, is clear-eyed about the chipmaker’s many problems and the tough road…

New advanced FIN7’s Anubis backdoor allows to gain full system control on Windows Pierluigi Paganini April 02, 2025 FIN7 cybercrime group has been linked to Anubis, a Python-based backdoor that provides remote access to compromised Windows systems. The threat actor FIN7, also known as Savage Ladybug, has developed a new Python-based malware, named Anubis Backdoor, which allows attackers to gain full remote control over infected Windows systems. It executes shell commands and system operations while using obfuscation to evade detection. Delivered via phishing and hosted on compromised SharePoint sites, it remains undetected by most antivirus solutions, posing a serious security…

EY has rebuilt its enterprise-focused Ethereum layer-2 blockchain Nightfall as a zero-knowledge rollup, eliminating waiting periods for transaction finality and simplifying the platform’s architecture.The update, released Wednesday, replaces Nightfall’s previous optimistic rollup design with a cryptographic approach that verifies transactions before submission to Ethereum. This removes the need for challenge periods that could delay finality for days.Now dubbed Nightfall_4, EY’s technical transition offers several advantages beyond speed. Replacing a “cryptoeconomic approach with a cryptographic approach” simplifies Nightfall’s architecture because, as a result, there would be “no need to accommodate challenging incorrect blocks,” EY said in a statement.The move provides “the same…

Password spraying attacks are becoming a serious threat, especially targeting Active Directory environments. These attacks enable attackers to exploit weak passwords and gain unauthorised access by applying login attempts across multiple accounts, making them difficult to detect. They also bypass account lockout mechanisms, causing significant risk to organisations. In this blog, we will detail how password spraying attacks work, provide real-world examples, and explain why they seriously threaten Active Directory. We have also covered proactive defence strategies, including network segmentation and detection tools, which can help you improve your security posture and reduce the risks associated with this attack. What…

Renowned cybersecurity expert Troy Hunt falls victim to a phishing attack, resulting in the exposure of thousands of subscriber details, and don’t lose your life savings in a whisky scam… All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Plus! Don’t miss our featured interview with Alastair Paterson, CEO and co-founder of Harmonic Security, discussing how companies can adopt Generative AI without putting their sensitive data at risk. Warning: This podcast may contain nuts, adult themes, and rude language. Hosts: Graham Cluley:  @grahamcluley.com  @[email protected] Carole Theriault:…

The openSNP project, a platform for sharing genetic and phenotypic data, will shut down on April 30, 2025, and delete all user submissions over privacy concerns and the risk of misuse by authoritarian governments. The decision was announced earlier this week by co-founder Bastian Greshake Tzovaras, who expressed concerns about how personal genomics data is subject to abuse today and how fundamentally the landscape has changed over the last 14 years. OpenSNP is a free and open-source platform where individuals can upload and share their genetic and phenotype data for research and educational purposes. Its original goal was to democratize…