Author: HackWatchit

ORIGINALLY AIRED ON APRIL 25, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Broken Twitter Finger 01:38 – ISO – Talkin’ Bout [infosec] News 2022-04-26 03:08 – Elon Buys Twitter 09:27 – Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code – https://krebsonsecurity.com/2022/04/leaked-chats-show-lapsus-stole-t-mobile-source-code/ 15:48 – Threat actors exploited more zero-day vulnerabilities in 2021 – https://www.securitymagazine.com/articles/97482-threat-actors-exploited-more-zero-day-vulnerabilities-in-2021 26:18 – FBI Releases IOCs Associated with BlackCat/ALPHV Ransomware – https://www.cisa.gov/uscert/ncas/current-activity/2022/04/22/fbi-releases-iocs-associated-blackcatalphv-ransomware 41:14 – Atlassian Drops Patches for Critical Jira Authentication Bypass Vulnerability – https://thehackernews.com/2022/04/atlassian-drops-patches-for-critical.html 45:19 – New BotenaGo Malware Variant Targeting Lilin Security Camera DVR Devices – https://thehackernews.com/2022/04/new-botenago-malware-variant-targeting.html 51:07 – The War in…

Counterfeit products are a growing problem in today’s market. With advancements in technology, counterfeiters have become more skilled at creating fake labels that are hard to distinguish from the real thing. You need to know how these counterfeiters use technology and what steps you can take to protect yourself and your business. This blog post will explore the clever methods counterfeiters use, such as digital printing and holograms, to create convincing fake labels. Understanding these tactics can help you identify counterfeit goods before they reach your hands. You will also learn practical strategies to spot and combat counterfeit products effectively.…

“Send $50, get $500 back guaranteed!” If you’ve seen messages like this on Telegram, you’ve encountered a scammer. These criminals are targeting Telegram’s 800+ million users with increasingly sophisticated schemes. From fake crypto investments to romance scams, they’re stealing millions from unsuspecting victims.  Here’s your guide to spotting and avoiding every major Telegram scam. The most worrying Telegram scams We’ve covered the seven most common (and most damaging) Telegram scams below, including what they are, and how to avoid them. 1. Investment schemes: The biggest money drain That message promising to double your money in a week? It’s the tip…

TH-200 is a course for hunting threat artifacts and is also known as OSTH, which follows the same convention as other OffSec exams. An OffSec Student Mentor shared details about the TH-200 course and the OSTH exam. Over the past few months, including the period of its release, I have been actively studying the TH-200 materials and preparing for the upcoming OSTH Exam. For those unfamiliar, the process of engaging with a course as a Student Mentor is the same as any other student. We thoroughly review the material, complete the exercises, and then take the exam under proctored conditions,…

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Critical Veeam Backup & Replication RCE vulnerability fixed, patch ASAP! (CVE-2025-23120)Veeam has released fixes for a critical remote code execution vulnerability (CVE-2025-23120) affecting its enterprise Veeam Backup & Replication solution, and is urging customers to quickly upgrade to a fixed version. FBI: Free file converter sites and tools deliver malwareMalware peddlers are increasingly targeting users who are searching for free file converter services (websites) and tools, the FBI’s Denver Field Office has warned earlier this month. How healthcare CISOs can balance security and accessibility without…

ORIGINALLY AIRED ON MAY 9, 2022 Articles discussed in this episode: 00:00 – Bud Patches Reporting 02:27 – BHIS – Talkin’ Bout [infosec] News 2022-05-09 03:47 – Story # 1 – CISA Shields Up – https://www.cisa.gov/shields-up 09:44 – Story # 2 – Critical BIG-IP Remote Code Execution Vulnerability – https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html 29:25 – Story # 3 – Colonial Pipeline faces nearly $1m fine – https://www.theregister.com/2022/05/09/in_brief_security/ 38:02 – Story # 4 – Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store – https://thehackernews.com/2022/05/another-set-of-joker-trojan-laced.html 45:15 – Story # 5 – FBI: Rise in Business Email-based Attacks is a $43B Headache…

Steve Feinberg was sworn in as the 36th Deputy Secretary of Defense on March 17 after the Senate confirmed his nomination earlier this month. Senators voted 59-40 in favor of Feinberg, President Donald Trump’s pick to be the Department of Defense’s second-in-command under Secretary of Defense Pete Hegseth. In this role, he will serve as the chief operating office. He will be responsible for overseeing the day-to-day management of the Department and executing Secretary Hegseth’s strategic priorities. Feinberg is a seasoned executive and founder of Cerberus Capital Management, a global investment firm focused on the U.S. defense industry. From 2018…

AI has reached an inflection point. It’s no longer just a business enabler—it’s redefining the attack surface. As organizations deploy AI to automate decision-making, accelerate operations, and enhance customer experiences, cybercriminals are doing the same, leveraging AI-driven automation to scale attacks faster than security teams can respond. The result? A growing security gap where APIs—the backbone of AI adoption—have become the easiest and most lucrative target. The DeepSeek API key exposure is just the latest example of how fragile these connections can be. While businesses focus on AI’s potential, security teams must confront the reality: AI is only as secure…

Introduction Data science teams can operate in myriad ways within a company. These organizational models influence the type of work that the team does, but also the team’s culture, goals, Impact, and overall value to the company.  Adopting the wrong organizational model can limit impact, cause delays, and compromise the morale of a team. As a result, leadership should be aware of these different organizational models and explicitly select models aligned to each project’s goals and their team’s strengths. This article explores six distinct models we’ve observed across numerous organizations. These models are primarily differentiated by who initiates the work,…