Author: HackWatchit

ORIGINALLY AIRED ON MARCH 21, 2022 Articles discussed in this episode: 03:27 – Netflix to clamp down on password sharing – https://about.netflix.com/en/news/paying-to-share-netflix-outside-your-household 10:15 – Ransomeware is still a thing 12:31 – Ransomeware Tell-All – https://www.zdnet.com/article/hit-by-ransomware-or-paid-a-ransom-now-some-companies-will-have-to-tell-the-government/ 24:01 – Microsoft Defender tags Office Updates as ransomware – https://www.bleepingcomputer.com/news/security/microsoft-defender-tags-office-updates-as-ransomware-activity/ 31:01 – Microsft Double Patch Tuesday – https://www.bleepingcomputer.com/news/microsoft/windows-zero-day-flaw-giving-admin-rights-gets-unofficial-patch-again/ 32:28 – BitB attack – https://thehackernews.com/2022/03/new-browser-in-browser-bitb-attack.html 39:44 – Women make up just 24% of the cyber workforce – https://www.cbsnews.com/news/cyber-workforce-cisa-director-jen-easterly/?ftag=CNM-00-10aac3a We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain:  Infosec articles  Challenging puzzles  Comic book based on real-life hacking adventures  Coloring contests  Bonus Backdoors & Breaches Consultant…

Falcon Customers Can Enable Network Vulnerability Assessment in Minutes If you’re already using the Falcon unified agent, activating Network Vulnerability Assessment takes just minutes — no extra scanners, agents, or hardware required. Within hours, you’ll uncover unmanaged devices, prioritize risks with AI-driven intelligence, and automate remediation — all seamlessly within the Falcon platform. To make it even easier to get started, Falcon Exposure Management customers can assess up to 10% of their assets at no cost, experiencing the benefits of real-time network visibility and risk prioritization.1 No complex setup. No additional infrastructure. Just instant network assessment, built into the Falcon…

Introduction: Can AI really distinguish dog breeds like human experts? One day while taking a walk, I saw a fluffy white puppy and wondered, Is that a Bichon Frise or a Maltese? No matter how closely I looked, they seemed almost identical. Huskies and Alaskan Malamutes, Shiba Inus and Akitas, I always found myself second-guessing. How do professional veterinarians and researchers spot the differences at a glance? What are they focusing on? 🤔 This question kept coming back to me while developing PawMatchAI. One day, while struggling to improve my model’s accuracy, I realized that when I recognize objects, I…

Attackers can bypass middleware auth checks by exploiting critical Next.js flaw Pierluigi Paganini March 24, 2025 A critical flaw in the Next.js React framework could be exploited to bypass authorization checks under certain conditions. Maintainers of Next.js React framework addressed a critical vulnerability tracked as CVE-2025-29927 (CVSS score of 9.1) with the release of versions versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3. “Next.js version 15.2.3 has been released to address a security vulnerability (CVE-2025-29927). Additionally, backported patches are available.” reads the advisory. “We recommend that all self-hosted Next.js deployments using next start and output: ‘standalone’ should update immediately.” Authorization checks in Next.js middleware can be bypassed, potentially allowing…

Authored by Dexter Shin  Summary  Cybercriminals are constantly evolving their techniques to bypass security measures. Recently, the McAfee Mobile Research Team discovered malware campaigns abusing .NET MAUI, a cross-platform development framework, to evade detection. These threats disguise themselves as legitimate apps, targeting users to steal sensitive information. This blog highlights how these malware operate, their evasion techniques, and key recommendations for staying protected.  Background  In recent years, cross-platform mobile development frameworks have grown in popularity. Many developers use tools like Flutter and React Native to build apps that work on both Android and iOS. Among these tools, Microsoft provides a…

Compared to 2023, 2024 saw a smaller increase in cyberattacks that caused physical consequences on OT organizations, according to Waterfall Security. Nevertheless, there were sharp jumps in the number of sites affected by the hacks, as well as in the number of attacks by nation states. 2024 saw a 146% increase in sites suffering physical consequences of operations because of cyberattacks, rising from 412 sites in 2023 to 1,015 in 2024. The slowing rate of increase in OT security incidents may be due to new SEC disclosure regulations, which require publicly traded companies to report “material” cybersecurity incidents. These rules,…

A new multi-platform ransomware-as-a-service (RaaS) operation named VanHelsing has emerged, targeting Windows, Linux, BSD, ARM, and ESXi systems. VanHelsing was first promoted on underground cybercrime platforms on March 7, offering experienced affiliates a free pass to join while mandating a deposit of $5,000 from less experienced threat actors. The new ransomware operation was first documented by CYFIRMA late last week, while Check Point Research performed a more in-depth analysis published yesterday. Inside VanHelsing Check Point’s analysts report that VanHelsing is a Russian cybercrime project that forbids targeting systems in systems in CIS (Commonwealth of Independent States) countries. Affiliates are allowed…

In-game skins are more than just cosmetic upgrades, they’re a core part of gaming culture. Whether you’re looking to collect rare skins or show off your prized inventory, managing skins comes with risks. Scammers are everywhere, looking to trick players out of their prized items or even compromise their accounts. That’s why it’s a must to handle your skins safely. With a few simple practices and some awareness, you can protect yourself from gaming-related scams and malware. Let’s break down the most common tricks scammers use and how to stay secure. Common Scams to Watch Out For Before we address…

A look at how the industry can turn AI into a powerful scam-fighting tool  Artificial intelligence (AI) has advanced exponentially in recent years, but the truth is that AI technology is a double-edged sword. While AI helps with countless innocent daily queries and enhancing efficiency and innovation for the general public, it also empowers cyber criminals with a sophisticated toolbox for scams and other deception. And as scams become more advanced, service providers and cyber security companies need to embrace AI – it could be the key to stronger, more intuitive scam protection. The AI Boom and Its Dark Side…