Author: HackWatchit

A China-linked cyberespionage group known as ‘FamousSparrow’ was observed using a new modular version of its signature backdoor ‘SparrowDoor’ against a US-based trade organization. The activity and new malware version were observed by security researchers at ESET, who found evidence the threat actor has been more active than initially thought since its last operations were exposed in 2022. Apart from the financial organization, other recent attacks ESET uncovered and linked to FamousSparrow include a Mexican research institute and a government institution in Honduras. In all these cases, initial access was achieved via exploitation of outdated Microsoft Exchange and Windows Server endpoints, infecting…

Biometric data refers to unique physical or behavioral characteristics that are used to verify a person’s identity. Revoking or changing biometric data is more complicated than changing passwords. Unlike passwords, biometric identifiers like fingerprints or retina scans are unique and permanent. This makes it particularly vulnerable if stolen. Cybercriminals can use stolen biometric information to impersonate someone and bypass security systems, putting personal accounts and data at risk. Many people are unaware of how their biometric data is collected. Often, we see in movies and TV shows how facial recognition technology is used in public spaces for surveillance, yet we…

Although $12 billion worth of Bitcoin options contracts expire tomorrow—one of the largest quarterly expiries that derivatives exchange Deribit has seen—CEO Luuk Strijers says he expects volatility to be subdued.On Derebit alone, the March 28 expiry affects 45% of the open options contracts on the platform. The exchange currently has $27 billion worth of open interest in Bitcoin contracts, with the put/call ratio skewing slightly pessimistic at 0.52.A call option gives buyers the right, but does not oblige them to buy an asset at a set price before the option expires. Typically, traders open these contracts when they’re expecting a…

Threat actors are continuously evolving their tactics to exploit vulnerabilities and gain unauthorized access. That increasingly involves attacks targeting the software supply chain. Traditional Application Security Testing (AST) and Standalone Application Security Posture Management (ASPM) solutions that only focus on code fail to secure the entire application and foundations of modern software development: open-source packages, third-party tools, CI/CD pipelines, and even the build environments themselves. The recent compromise of the GitHub Action tj-actions/changed-files, which enabled attackers to exfiltrate sensitive data from CI/CD pipelines, is a clear example of  how attackers exploit the supply chain to weaponize trusted components. The application has changed. It has expanded beyond code…

Are you confident someone isn’t lurking in the background on your computer right now, gathering information and preparing to impersonate you? The era of confidently sending e-mails securely or answering the phone and knowing the caller on the other end has vanished. Today, unprecedented technological advances drive efficiencies and capabilities unimaginable 20 years ago, but they come at a steep price for the unprepared. Cybercriminals are constantly looking for opportunities to gain access to your personal and financial information by employing tactics such as phishing, malware and exploiting outdated software. This is nothing new and it’s essential you understand these…

Cary, North Carolina, March 27th, 2025, CyberNewsWire INE, a global leader in networking and cybersecurity training and certifications, is proud to announce it is the recipient of twelve badges in G2’s Spring 2025 Report, including Grid Leader for Cybersecurity Professional Development, Online Course Providers, and Technical Skills Development, which highlight INE’s superior performance relative to competitors.  “INE solves the problem of accessible, hands-on security training with structured learning paths and real-world labs,” says SOC Analyst Sai Tharun K. “It helps bridge the gap between theory and practical skills. For me, it has been very valuable in refining my penetration testing,…

When it comes to security, potent emerging threats on the horizon are causing regulators to be more proactive than ever. For organizations, this means constant reorientation to new compliance frameworks, obligations, and risks. At the forefront of this regulatory churn is the European Union’s expanded Network & Information Systems directive, otherwise known as NIS2, a regulation focused on cyber security and risk management in the EU. Companies in critical sectors operating in the EU or serving EU customers need to adhere to NIS2. While a lot of the discourse around NIS2 focuses on how enterprises need to address new compliance…

The UK National Cyber Security Centre (NCSC) has released security guidance for domain registrars and operators of Domain Name System (DNS) services. “DNS registrars have an important role to help counter domain abuses throughout their lifecycle,” the NCSC says. They should work on minimizing the ability of actors to register misleading domains, speeding up the takedown of malicious domains, helping customers secure and retain their domain registrations, and reducing the number of vulnerable and compromised systems that can be used for malicious purposes. The guidelines The document builds on existing industry good practice from international bodies such as ICANN. It…

Ben Bowman is a Security Analyst at Black Hills Information Security. He graduated in 2024 with a degree in cyber operations. Ben conducts research as well as tool development outside of testing. As an attacker, you value speed and silence when conducting an attack. But what happens if you’re scanning a host for service banners and every port is open? The scan takes an endless amount of time why would every port be open?! It’s frustrating and disorienting. It forces the attack to be louder and more aggressive, and BOOM! The SOC notices your presence and isolates you, ending your…