Author: HackWatchit
ORIGINALLY AIRED ON JANUARY 4, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Who’s Job Is It Anyway? 00:20 – BHIS – Talkin’ Bout [infosec] News 2022-01-04 01:58 – Story # 1: iLOBleed Rootkit – https://thehackernews.com/2021/12/new-ilobleed-rootkit-targeting-hp.html 08:39 – Story # 2: Firmware attack can drop persistent malware in hidden SSD area – https://www.bleepingcomputer.com/news/security/firmware-attack-can-drop-persistent-malware-in-hidden-ssd-area/ 17:35 – Story # 3: OverWatch Exposes AQUATIC PANDA – https://www.crowdstrike.com/blog/overwatch-exposes-aquatic-panda-in-possession-of-log-4-shell-exploit-tools/ 21:38 – Story # 4: Experts warn against storing passwords in Chrome – https://nypost.com/2022/01/02/experts-warn-against-storing-passwords-in-chrome/ 42:16 – Official Report: Not Responsible for the Information Super Highway Ready to learn more? Level up your skills with affordable classes…
How can blockchain support confidential transactions while meeting regulatory demands? COTI launches its mainnet as a scalable Layer 2 to support confidential operations in Web3. COTI announces the launch of its mainnet after more than two years of research and development. The network operates as a Layer 2 solution for confidential transactions and aims to serve as a bridge between privacy and compliance in the digital ecosystem. The platform utilizes an implementation of Garbled Circuits developed in collaboration with Soda Labs. This system is designed to offer significant speed improvements over existing solutions while providing a Privacy-on-Demand service across multiple…
Trends in identity security for 2025 Identity security isn’t just evolving — it’s undergoing a fundamental shift. The old playbook of static authentication, single-vendor reliance, and perimeter-based defense no longer holds up in a world of growing complexity, hybrid IT, and relentless threats. In 2025, the organizations that come out ahead will be the ones rethinking their identity strategies from the ground up. From embracing multi-IDP architectures to navigating the chaos of mergers and acquisitions, the coming year demands agility, orchestration, and proactive defense. Here are the key trends that will separate the security leaders from those that fall behind.…
Authentication bypass CVE-2025-22230 impacts VMware Windows Tools Pierluigi Paganini March 26, 2025 Broadcom addressed a high-severity authentication bypass vulnerability, tracked as CVE-2025-22230, in VMware Tools for Windows. Broadcom released security updates to address a high-severity authentication bypass vulnerability, tracked as CVE-2025-22230 (CVSS score 9.8), impacting VMware Tools for Windows. VMware Tools for Windows is a suite of utilities that enhances the performance and usability of virtual machines (VMs) running on VMware hypervisors like VMware Workstation, Fusion, and vSphere (ESXi). The vulnerability is due to improper access control. Low-privileged local attackers can exploit this vulnerability in simple attacks without user interaction…
The U.K. National Cyber Security Centre (NCSC) has introduced a comprehensive set of eight principles for privileged access workstations, designed to assist organizations and cybersecurity experts deploy privileged access workstation solutions. The principles detail the key features of these workstations and offer practical advice for their implementation in everyday scenarios. Additionally, they provide a framework for evaluating whether third parties with high-risk access to the environment are utilizing securely configured devices. Prescribed for cybersecurity professionals, large organizations, and the public sector, the eight principles laid down by the NCSC include establishing the organization’s privileged access workstations’ strategy; designing the privileged…
In Part 1 of this tutorial series, we introduced AI Agents, autonomous programs that perform tasks, make decisions, and communicate with others. Agents perform actions through Tools. It might happen that a Tool doesn’t work on the first try, or that multiple Tools must be activated in sequence. Agents should be able to organize tasks into a logical progression and change their strategies in a dynamic environment. To put it simply, the Agent’s structure must be solid, and the behavior must be reliable. The most common way to do that is through: Iterations – repeating a certain action multiple times,…
The Internet Archive (Archive.org), home to the Wayback Machine, is temporarily offline due to a reported power outage. Engineers are working to restore access as users await updates. This follows recent challenges, including DDoS attacks and a data breach. The Internet Archive (aka Wayback Machine), an online treasure trove for researchers, history buffs, and anyone looking for a blast from the past, is currently experiencing a service outage. If you’ve tried to access the Wayback Machine or any of their vast collections recently, you’ve likely been met with a simple “Temporarily Offline” message. The organization has taken to their official…
ORIGINALLY AIRED ON JANUARY 10, 2022 Articles discussed in this episode: 01:58 – Story # 1: WordPress Core Vulnerabilities – https://www.searchenginejournal.com/wordpress-core-vulnerabilities/432042/#close 11:32 – Story # 2: Card-stealing code on over 100 Sotheby’s luxury real estate sites – https://therecord.media/card-stealing-code-found-on-more-than-100-sothebys-luxury-real-estate-sites/ 14:55 – Story # 3: France hits Facebook & Google with $210 million in fines – https://www.bleepingcomputer.com/news/legal/france-hits-facebook-and-google-with-210-million-in-fines/ 22:14 – Story # 4: Pwn2Own, ShmooCon security conferences postponed due to COVID-19 surge – https://therecord.media/pwn2own-shmoocon-security-conferences-postponed-due-to-covid-19-surge/ 24:48 – Story # 5: BREAKING! Cyber Threat Map – https://www.fireeye.com/cyber-map/threat-map.html 27:21 – Story # 6: Open source developer corrupts widely-used libraries – https://www.theverge.com/2022/1/9/22874949/developer-corrupts-open-source-libraries-projects-affected 34:38 – Story # 7:…
The UK Information Commissioner’s Office (ICO) has issued a £3.07 million fine on Advanced Computer Software Group Ltd for a 2022 ransomware attack that exposed the sensitive personal data of 79,404 people, including National Health Service (NHS) patients. The cyberattack was announced in early August 2022 when various NHS services, including 111 emergency services, suffered significant outages, pointing to a breach at British managed service provider (MSP) Advanced. Advanced provided NHS with various patient management and health-related products such as Adastra, Caresys, Carenotes, Odyssey, Crosscare, Staffplan, and eFinancials. The company didn’t share many details about which ransomware group had compromised them,…