Author: HackWatchit

A backbone of our economy, Fortune 500 companies employ more than 31 million people worldwide. According to data analyzed by the Enzoic research team, over the past three years of 2022, 2023, and 2024, more than three million employee-linked accounts became newly compromised by cybercriminals. 1 in 10 Fortune 500 employees had their credentials exposed in recent years 5.7 exposure average per compromised account These leaked credentials pose significant risks, enabling account takeover (ATO), spear phishing attacks, fraud, and ransomware exploits. Learn more about the Fortune 500 Employee-Linked Account Exposure Report and its impact. Download the report

This webcast originally aired on March 13, 2025. In this video, Michael Allen discusses how to test Adversary-in-the-Middle attacks without using hacking tools. He delves into the intricacies of credential harvesting, the evolution of multi-factor authentication (MFA), and how attackers adapt their strategies to bypass security measures. Michael provides insights on identifying weak MFA methods and offers practical steps to strengthen security, highlighting the importance of using FIDO2 passkeys as a robust defense against Adversary-in-the-Middle attacks. The evolution of credential harvesting attacks highlights the constant adaptation of attackers in response to security measures like Multi-Factor Authentication (MFA). Adversary-in-the-middle attacks leverage…

Cloudflare announced that it closed all HTTP connections and it is now accepting only secure, HTTPS connections for api.cloudflare.com. The move prevents unencrypted API requests from being sent, even accidentally, to eliminate the risk of sensitive information being exposed in cleartext traffic before the server closes the HTTP conection and redirects to a secure communication channel. “Starting today, any unencrypted connection to api.cloudflare.com will be completely rejected,” reads Cloudflare’s announcement on Thursday. “Developers should not expect a 403 Forbidden response any longer for HTTP connections, as we will prevent the underlying connection to be established by closing the HTTP interface entirely. Only secure…

A cybercriminal collective, known as Cloak, has confirmed its involvement in an attack targeting the Virginia attorney general’s office in February 2025. This attack has reportedly caused disruption, compelling officials to enact emergency measures. Chief Deputy Attorney General Steven Popps communicated to staff via email that the majority of the office’s IT resources, which included vital systems such as email, virtual private network access, internet connectivity, and the attorney general’s website were rendered inoperative, as reported by the Washington Post. The disruption also forced employees to revert to traditional paper-based documentation processes. In response, the attorney general’s office promptly notified…

Cyber threats are evolving faster than ever, and security leaders can’t afford to fall behind. That’s why we created the 2025 Fortra State of Cybersecurity Survey—to provide valuable insights that help SOCs, CISOs, and other cybersecurity decision-makers shape their strategies for the year ahead. The report compiles insights from 12 key cybersecurity roles —analysts, developers, architects, directors, and executives) spanning 24 industries worldwide, drawing from Fortra’s 25,000+ global customers. For security leaders, staying ahead of these trends is critical. The survey provides a data-driven look at the biggest risks organizations face, helping you make informed decisions, allocate resources effectively, and strengthen your…

iProov launched iProov Workforce MFA. This device-independent, FIDO Alliance-certified, biometric authentication solution helps organizations mitigate the risk of one of workforce security’s most crucial concerns: account takeover. Using biometric authentication as part of an MFA process adds an irrefutable layer of identity confirmation to help organizations prevent significant financial losses, reputational damage, and operational disruptions. The solution can be used in conjunction with passkeys, or independently of the device, enabling it to run on users’ personal and shared devices. It also reduces the exposure and costs associated with password resets while offering cross-platform compatibility and a more streamlined user authentication…

ORIGINALLY AIRED ON APRIL 11, 2022 Articles discussed in this episode: The US Navy had cybersecurity wrong. Expect change. – https://www.c4isrnet.com/digital-show-dailies/navy-league/2022/04/05/us-navy-had-cybersecurity-wrong-expect-change/ Hackers have found a clever new way to steal your Microsoft 365 credentials. – https://www.techradar.com/news/hackers-have-found-a-clever-new-way-to-steal-your-microsoft-365-credentials Exclusive: Senior EU officials were targeted with Israeli spyware. – https://www.reuters.com/technology/exclusive-senior-eu-officials-were-targeted-with-israeli-spyware-sources-2022-04-11/ Snap-on discloses data breach claimed by Conti ransomware gang. – https://www.bleepingcomputer.com/news/security/snap-on-discloses-data-breach-claimed-by-conti-ransomware-gang/ Bearded Barbie hackers catfish high-ranking Israeli officials. – https://www.bleepingcomputer.com/news/security/bearded-barbie-hackers-catfish-high-ranking-israeli-officials/ Justice Department Announces Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate (GRU). – https://www.justice.gov/opa/pr/justice-department-announces-court-authorized-disruption-botnet-controlled-russian-federation WatchGuard failed to explicitly disclose critical flaw exploited by Russian hackers. – https://arstechnica.com/information-technology/2022/04/watchguard-failed-to-disclose-critical-flaw-exploited-by-russian-hackers/ Ukrainians use…

The General Services Administration will overhaul the cloud security program, known as FedRAMP, with a goal of making it leaner, less burdensome to contractors and agency customers and more reliant on automation. A source familiar with GSA’s new strategy and who requested anonymity, said when the agency releases details of its Federal Risk Authorization Management Program (FedRAMP) 2025 plan on Monday, the aim is to make sure “FedRAMP is not going to stand between cloud providers and their customers any longer.” FedRAMP director Pete Waterman is speaking at an Alliance for Digital Innovation (ADI) event in Washington, D.C. Monday afternoon…

Bitcoin regained momentum Sunday and nudged up by as much as 2.7% following reports that the White House has signaled a more targeted approach to its April 2 tariffs, confirming it would likely omit sector-specific duties while still implementing “reciprocal tariffs” on major trading partners.The crypto market saw higher gains amid reports on Sunday afternoon from Bloomberg and the Wall Street Journal that Trump’s administration is narrowing its tariff strategy.Bitcoin traded above $86,700 by Sunday midnight, roughly twelve hours after the aforementioned reports emerged, showing resilience after volatile swings over the past week, which saw lows of $81,200.The alpha crypto…