Author: HackWatchit
While the Trump administration is cutting hundreds of millions of dollars in federal contracts and planned spending under a DOGE-led “efficiency” push, cybersecurity leaders in agencies and industry say there’s been minimal impact on efforts to upgrade federal cyber defenses so far. The Biden administration kicked off a major push to upgrade federal cyber defenses under a 2021 executive order. Agencies have spent the past three years working on the goals laid out in 2022 federal zero trust strategy. Before departing office in January, President Joe Biden signed a new cybersecurity executive order with updated goals for federal departments and…
U.S. CISA adds Google Chromium Mojo flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 27, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium Mojo flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Google Chromium Mojo sandbox escape vulnerability, tracked as CVE-2025-2783, to its Known Exploited Vulnerabilities (KEV) catalog. This week Google has released out-of-band fixes to address a high-severity security vulnerability, tracked as CVE-2025-2783, in Chrome browser for Windows. The flaw was actively exploited in attacks targeting organizations in Russia. The vulnerability is an incorrect handle provided in…
Ransomware attacks have been growing in popularity, especially in critical infrastructure. Due to the importance of critical infrastructure, the need to secure the environments is an impending issue. The technology used in ICS environments is sensitive and often based on older protocols. The desire for connectivity has created an opportune target for malicious actors. Join Ashley in this adventure to learn about our critical infrastructure, the threats, and how to secure them. At the end of this BHIS webcast, you will have a better understanding of ICS infrastructure, how ransomware affects ICS, and how to protect against threats to ICS.…
The legacy domain for Microsoft Stream was hijacked to show a fake Amazon site promoting a Thailand casino, causing all SharePoint sites with old embedded videos to display it as spam. Microsoft Stream is an enterprise video streaming service that allows organizations to upload and share videos in Microsoft 365 apps, such as Teams and SharePoint. Video content hosted on Microsoft Stream was accessed or embedded through a portal at microsoftstream.com. In September 2020, Microsoft announced they were deprecating the Microsoft Stream classic service and moving it into SharePoint. Organizations were told to migrate their Microsoft Stream videos to the…
In this Help Net Security interview, Kim Crawley, cybersecurity expert and Professor at the Open Institute of Technology, discusses her latest book, The Ultimate Cybersecurity Careers Guide. She shares insights on how aspiring professionals can break into the field and explores the importance of continuous learning. What makes this guide different from other available cybersecurity career resources? That’s an excellent question. The vast majority of books on cybersecurity certifications are guides to one particular certification or another. There’s honestly a lot of good advice on the internet about the matters I cover in my book, such as how to find…
Panama has unveiled a sweeping draft bill aimed at regulating cryptocurrencies and fostering the development of blockchain-based services, signaling a renewed effort to position the country as a fintech leader in Latin America.The proposed law establishes a legal framework for using digital assets in financial transactions, establishes licensing requirements for service providers, and includes strict compliance measures in line with international financial standards.Legal recognition of digital assetsUnder the bill, digital assets are recognized as a legal means of payment, allowing individuals and businesses to freely agree on their use in both commercial and civil contracts.The legislation explicitly authorizes the use…
Many successful phishing attacks result in a financial loss or malware infection. But falling for some phishing scams, like those currently targeting Russians searching online for organizations that are fighting the Kremlin war machine, can cost you your freedom or your life. The real website of the Ukrainian paramilitary group “Freedom of Russia” legion. The text has been machine-translated from Russian. Researchers at the security firm Silent Push mapped a network of several dozen phishing domains that spoof the recruitment websites of Ukrainian paramilitary groups, as well as Ukrainian government intelligence sites. The website legiohliberty[.]army features a carbon copy of…
There are plenty of phish in the sea. Millions of bogus phishing emails land in millions of inboxes each day with one purpose in mind—to rip off the recipient. Whether they’re out to crack your bank account, steal personal information, or both, you can learn how to spot phishing emails and keep yourself safe. And some of today’s phishing emails are indeed getting tougher to spot. They seem like they come from companies you know and trust, like your bank, your credit card company, or services like Netflix, PayPal, and Amazon. And some of them look convincing. The writing and…
ORIGINALLY AIRED ON DECEMBER 20, 2021 Articles discussed in this episode: 00:00 – PreShow Banter™ — Getting Nerdy With It 04:18 – BHIS – Talkin’ Bout [infosec] News 2021-12-20 – The Final Broadcast … of 2021 05:34 – Story # 1: Apple releases Android app to find rogue AirTags – https://therecord.media/apple-releases-android-app-to-find-malicious-airtags/ 18:24 – Story # 2: A Summary of Sorts – The Tale of 2021 21:40 – Story # 3: Kronos hit with ransomware – https://www.zdnet.com/article/hr-platform-kronos-brought-down-by-ransomware-attack-ukg-warns-of-data-breach/ 22:19 – Story # 4: 300,000 MikroTik Devices Found Vulnerable – https://thehackernews.com/2021/12/over-300000-mikrotik-devices-found.html 26:51 – Story # 5: WordPress Sites Under Cyberattack – https://thehackernews.com/2021/12/16-million-wordpress-sites-under.html 28:45…