Author: HackWatchit

The white Jaguar with a bulky top headed toward me on the busy streets of Austin, Texas. About a block away, it stopped at a stop sign. There were no cars at the cross street, so the electric vehicle proceeded to move and rolled to a stop right in front of me, turning on its hazard lights. Welcome to Waymo One, a self-driving car service owned by Google parent company Alphabet. And on one Tuesday morning, it was my Uber ride as well. Alphabet’s autonomous vehicle (AV) division, Waymo, has partnered with Uber to bring self-driving cars to the public.…

Hannah Cartier // Social engineering, especially phishing, is becoming increasingly prevalent in red team engagements as well as real-world attacks. As security awareness improves and systems become more locked down, it is unsurprising that the human element of security is becoming a more appealing attack vector. In addition, phishing campaigns can be used to test the controls surrounding a company’s employees. Scoring one valid login to a target’s resources can save a tester hours or even days of vulnerability scanning and exploitation. In this blog, we are going to walk through setting up a simple yet effective landing page for…

Here’s a look at the most interesting products from the past week, featuring releases from 1Kosmos, Cloudflare, Cytex, Keysight Technologies, and TXOne Networks. Keysight AI Insight Brokers accelerates threat detection and response Keysight Technologies announces the expansion of its Keysight Vision Network Packet Brokers (NPBs), with the introduction of AI Insight Brokers. By applying AI earlier in the performance and security monitoring process, the new solution offers customers enhanced protection, and the ability to troubleshoot any performance issues earlier to avoiding cyber threats and enhance detection. 1Kosmos 1Key secures shared login environments and OT systems Using 1Kosmos 1Key, each user…

Microsoft is investigating an Exchange Online bug causing anti-spam systems to mistakenly quarantine some users’ emails. According to a new incident report added to the Microsoft 365 Admin Center, the email issues started almost five hours ago, at 10:11 UTC.  While the company has yet to share what regions are impacted, this Exchange Online incident has been tagged as a critical service issue tracked under EX1038119 on the Microsoft 365 admin center. “Specific URLs are being miscategorised and quarantined by our anti-spam systems, causing impact,” said Microsoft describing the root cause. “Some users’ Exchange Online email messages may be unexpectedly quarantined.” “Efforts to alleviate impact by adding the affected…

CrossFi has dropped a bombshell with its 2025 Crypto Market Research Survey—a sprawling study of over 5,000 crypto users from India, Finland, and Russia. This isn’t your typical tech-bro echo chamber. It’s a vivid snapshot of a shifting landscape: 80% women, aged 28 to 43, earning $1,000 to $3,000 monthly, and leaning hard into cryptocurrencies and Web3 banking. The data challenges stereotypes, exposes pain points, and hints at a future where digital finance could rival cash. So, who’s driving this revolution? What’s holding it back? And what needs to happen by 2025 to make crypto as seamless as a dollar…

U.S. Treasury removed sanctions against the crypto mixer service Tornado Cash Pierluigi Paganini March 22, 2025 The U.S. Treasury is lifting sanctions on Tornado Cash, a crypto mixer accused of helping North Korea’s Lazarus Group launder illicit funds. The U.S. Treasury Department removed sanctions against the cryptocurrency mixer service Tornado Cash. In August 2022, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned the crypto mixer service Tornado Cash used by North Korean-linked Lazarus APT Group. The mixers are essential components for cybercriminals that use them for money laundering, it was used to launder the funds stolen from the victims. According to…

Pipeline operations are essential for the transportation of oil, gas, and other critical resources and, in light of recent cyber threats and incidents, the security of pipeline operations is increasingly under the microscope. As cybersecurity threats grow more sophisticated, securing Operational Technology (OT) systems, which control the physical infrastructure of pipelines, has become paramount.  In the United States, the Transportation Security Administration (TSA) has jurisdiction over pipeline security and issued mandatory cybersecurity directives in 2021 following the Colonial Pipeline ransomware attack that demonstrated how a single cyber intrusion could disrupt fuel distribution along the East Coast, resulting in widespread operational…

How Vital is the Role of Non-Human Identities in Identity and Access Management (IAM)? Have you ever wondered how digital machinery and applications gain access to our systems? The answer lies in Non-Human Identities (NHIs), a critical, yet often overlooked aspect of Identity and Access Management (IAM). But how significant is the role of NHIs in IAM? Let’s explore. Understanding the Non-Human Identity Paradigm Simply put, NHIs are machine identities used in cybersecurity operations. They represent machines, services, APIs- anything that isn’t human but requires access to our systems. Just like us, these machines have unique identifiers and access permissions…

ORIGINALLY AIRED ON MAY 16, 2022 Articles discussed in this episode: 00:56 – Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors – https://threatpost.com/microsofts-may-patch-tuesday-updates-cause-windows-ad-authentication-errors/179631/ 08:56 – Update rings for Windows 10 and later policy in Intune – https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings 09:06 – Infosec Weather Report With Bud Patches – 12:26 – FBI, CISA, and NSA warn of hackers increasingly targeting MSPs – https://www.bleepingcomputer.com/news/security/fbi-cisa-and-nsa-warn-of-hackers-increasingly-targeting-msps/ 17:55 – Ransomware has gone down because sanctions against Russia are making life harder for attackers – https://www.zdnet.com/article/ransomware-has-gone-down-because-sanctions-against-russia-are-making-life-harder-for-attackers/ 26:37 – Conti Ransomware Attack Spurs State of Emergency in Costa Rica – https://threatpost.com/conti-ransomware-attack-emergency-costa-rica/179560/ 31:19 – BPFDoor — an active…