Author: HackWatchit
ORIGINALLY AIRED ON JUNE 6, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Boat Facts 01:38 – BHIS – Talkin’ Bout [infosec] News 2022-06-06 03:51 – Story # 1: Elon Musk threatens to scrap Twitter deal – https://www.theverge.com/2022/6/6/23156233/elon-musk-twitter-bots-merger-agreement-termination-threat 07:02 – Story # 2: Confluence Server and Data Center CVE – https://github.com/Nwqda/CVE-2022-26134 13:51 – Story # 3: Mandiant: “No evidence” we were hacked by LockBit ransomware – https://www.bleepingcomputer.com/news/security/mandiant-no-evidence-we-were-hacked-by-lockbit-ransomware/ 18:24 – Story # 4: Fake Windows exploits target infosec community with Cobalt Strike – https://www.bleepingcomputer.com/news/security/fake-windows-exploits-target-infosec-community-with-cobalt-strike/ 27:30 – Story # 5: Hacker Steals Database of Hundreds of Verizon Employees –…
Ransomware is the top predicted threat for 2025, which is especially concerning given 38% of security professionals say ransomware will become even more dangerous when powered by AI, according to Ivanti. In comparison to the threat level, only 29% of security professionals say they are very prepared for ransomware attacks – leaving a significant gap in preparedness (29%), highlighting the need for more robust security measures. Strong understanding of exposure management among security leaders A more sophisticated and adaptable approach to cybersecurity is necessary, one that takes into account the trade-offs between business risk and reward, rather than solely focusing…
CERT-UA warns of cyber espionage against the Ukrainian defense industry using Dark Crystal RAT Pierluigi Paganini March 20, 2025 CERT-UA warns of a cyber campaign using Dark Crystal RAT to target Ukraine’s defense sector, including defense industry employees and Defense Forces members. The Computer Emergency Response Team of Ukraine (CERT-UA) uncovered a new cyber espionage campaign targeting employees of defense-industrial complex enterprises and representatives of the Defense Forces of Ukraine with Dark Crystal RAT. In March 2025, threat actors distributed archived messages through Signal. The archive contains a fake PDF report and DarkTortilla malware, which acts as a launcher for…
Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company’s Oracle Cloud federated SSO login servers. “There has been no breach of Oracle Cloud. The published credentials are not for the Oracle Cloud. No Oracle Cloud customers experienced a breach or lost any data,” the company told BleepingComputer. This statement comes after a threat actor known as rose87168 released multiple text files yesterday containing a sample database, LDAP information, and a list of the companies that they claimed were stolen from Oracle Clouds’ SSO platform. As further proof…
The National Nuclear Security Administration’s technology hasn’t kept pace with its mission demands.This lack of investment has created a backlog of technology needs. But now, the agency is trying to close its technology gap, said Jaime Wolff, the associate administrator for Information Management and chief information officer for NNSA. Jaime Wolff is the CIO of the National Nuclear Security Administration. “We should have been making many of these investments in technology over the past seven years, but we’re doing it today. That’s a huge differentiator,” Wolff said at the recent AFCEA Bethesda Energy, Infrastructure and Environment (EIE) Summit, an excerpt…
Credential theft alert! Venak Security discovers a BYOVD attack using .SYS drivers to bypass Windows security. Learn how this attack steals user data and gains control. A recent investigation by Venak Security uncovered an attack scenario that leverages a vulnerability within a kernel-level driver associated with Checkpoint’s ZoneAlarm antivirus software. The vulnerable driver, vsdatant.sys, version 14.1.32.0, with an MD5 hash of 190fe0ce4d43ad8eed97aaa68827e2c6, was the core component of the exploit. This driver was originally released in 2016 and became a point of entry for malicious actors employing a technique known as “Bring Your Own Vulnerable Driver” (BYOVD). This method allowed the…
Continuing its global expansion plan Integrity360 has acquired cybersecurity company Holiseum headquartered in Paris, France. The terms of the transaction were not disclosed. The acquisition will enable Integrity360 to accelerate its growth in France and continental Europe, and significantly provide a new and exciting services practice focused on OT (operational technology) and IoT (Internet of Things) technologies which complement Integrity360’s existing service practices. Those include cyber risk and assurance, cyber security testing, incident response, infrastructure, Microsoft cyber, payments compliance, and a highly comprehensive range of cyber security managed services including managed detection and response (MDR) solutions. Holiseum will continue to…
A solo Bitcoin miner hit the jackpot early Friday, mining a block without a pool of supporting miners and bagging a $266,000 reward in the process. But just how realistic is such a feat?On Friday, an unknown miner processed Bitcoin block 888,737. The block contained 2,327 transactions and the miner received a payout of 3.125 BTC, as well as 0.032 BTC in fees. At today’s Bitcoin price of $84,257 per coin, that’s a more than $266,000 payday.Bitcoin miners work to process blocks on the cryptocurrency’s network. Blocks are full of transaction data and are part of the Bitcoin blockchain.Miners are given…
ORIGINALLY AIRED ON JUNE 13, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-06-13 02:26 – Story # 1: Roblox Game Pass store used to sell ransomware decryptor – https://www.bleepingcomputer.com/news/security/roblox-game-pass-store-used-to-sell-ransomware-decryptor/ 07:35 – Story # 2: New Jersey school district forced to cancel final exams amid ransomware recovery effort – https://therecord.media/new-jersey-school-district-forced-to-cancel-final-exams-amid-ransomware-recovery-effort/ 10:31 – Story # 3: Security Fixes Won’t Require Full iOS Update in iOS 16, Will Be Installed Automatically – https://www.macrumors.com/2022/06/06/ios-16-security-fixes-automatic/ 15:08 – Story # 4: Gone in 130 seconds: New Tesla hack gives thieves their own personal key – https://arstechnica.com/information-technology/2022/06/hackers-out-to-steal-a-tesla-can-create-their-very-own-personal-key/ 20:07 – Story…