Author: HackWatchit
A new phishing campaign has been tricking users into giving out access to their Meta Business accounts especially Instagram. The scam, detected by the Cofense Phishing Defense Center, uses fake chat support, detailed instructions, and attempts to add itself as a secure login method to hijack business accounts. The phishing campaign starts with a fake Instagram alert email stating that the user’s ads are suspended due to a violation of advertising laws. The email, which appears to be from Instagram’s support team, asks the user to click on a “Check more Details” button to resolve the issue. However, the email…
In today’s world, the reliability of data solutions is everything. When we build dashboards and reports, one expects that the numbers reflected there are correct and up-to-date. Based on these numbers, insights are drawn and actions are taken. For any unforeseen reason, if the dashboards are broken or if the numbers are incorrect — then it becomes a fire-fight to fix everything. If the issues are not fixed in time, then it damages the trust placed on the data team and their solutions. But why would dashboards be broken or have wrong numbers? If the dashboard was built correctly the first time,…
ORIGINALLY AIRED ON JUNE 27, 2022 Articles discussed in this episode: 02:13 – Story # 1: The #1 Period Tracker on the App Store Will Hand Over Data Without a Warrant – https://www.vice.com/en/article/y3pgvg/the-1-period-tracker-on-the-app-store-will-hand-over-data-without-a-warrant 20:56 – Story # 2: LockBit 3.0 introduces the first ransomware bug bounty program – https://www.bleepingcomputer.com/news/security/lockbit-30-introduces-the-first-ransomware-bug-bounty-program/ 25:44 – Story # 3: Former AWS engineer convicted over hack that cost Capital One $270m – https://techmonitor.ai/technology/cybersecurity/capital-one-hack-aws-paige-thompson 28:52 – Story # 4: CISA experts propose ‘311’ cybersecurity emergency call line for small businesses – https://therecord.media/cisa-experts-propose-311-cybersecurity-emergency-call-line-for-small-businesses/ 38:25 – Story # 5: Clever phishing method bypasses MFA using Microsoft WebView2 apps –…
Cybersecurity services firm Bridewell revealed that the top challenges facing critical national infrastructure (CNI) organizations are consistent with last year – mainly being data privacy, cyber resilience and cloud security. Survey data also recognized numerous potential attack vectors in operational technology (OT) environments, with cloud services and internet access standing out as notable concerns. While the adoption of cloud for OT applications is still emerging, it raises apprehension. However, internet access should be less worrisome due to NIS regulations emphasizing restricted direct access. Nonetheless, CNI organizations may have legitimate reasons for connecting OT systems to the internet, making them acutely…
The Centralized AI Trap Picture this: training a single AI model costs more than building a skyscraper. GPT-4’s price tag? A cool $169 million. That’s the reality of today’s AI ecosystem, where giants hold the keys to the computational kingdom. However, centralized AI is a house of cards. Costs are astronomical: Startups and researchers? They’re locked out. Scalability is a myth: Demand for compute grows faster than Moore’s Law. Single points of failure: One AWS outage can paralyze industries. Decentralized platforms like Nidum.ai, bittensor challenge this status quo by redefining access to computational power. By aggregating underutilized hardware—idle GPUs in…
Authorities in at least two U.S. states last week independently announced arrests of Chinese nationals accused of perpetrating a novel form of tap-to-pay fraud using mobile devices. Details released by authorities so far indicate the mobile wallets being used by the scammers were created through online phishing scams, and that the accused were relying on a custom Android app to relay tap-to-pay transactions from mobile devices located in China. Image: WLVT-8. Authorities in Knoxville, Tennessee last week said they arrested 11 Chinese nationals accused of buying tens of thousands of dollars worth of gift cards at local retailers with mobile…
Cisco Smart Licensing Utility flaws actively exploited in the wild Pierluigi Paganini March 21, 2025 Experts warn of the active exploitation of two recently patched security vulnerabilities affecting Cisco Smart Licensing Utility. Cisco disclosed two vulnerabilities in its Smart Licensing Utility: CVE-2024-20439, a static credential backdoor, and CVE-2024-20440, an information disclosure flaw. Attackers can exploit the backdoor to access sensitive log files. While no active exploitation was initially observed, the publication of exploit details has led to recent attack activity. “Multiple vulnerabilities in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to collect sensitive information or administer Cisco…
Cyber crooks are exploiting users’ interest in Semrush, a popular SEO, advertising, and market research SaaS platform, to steal their Google account credentials. The fraudulent campaign Malwarebytes researchers have spotted a campaign consisting of a slew of malicious ads shown by Googe Search when users look for Semrush. “Each ad uses a unique domain name which does a redirect to more static domains dedicated to the fake Semrush and Google account login pages,” MalwareBytes researcher Jérôme Segura explained. On those spoofed phishing pages, the only login option available to potential victims is with their Google account: the fields for logging…
Artificial intelligence (AI) is transforming software testing, driving unparalleled speed, accuracy, and coverage in comparison to traditional, manual methods. However, all good things come at a cost. As organizations integrate AI-powered testing tools into their DevOps pipelines, they must also handle new obstacles – such as AI’s difficulties in handling complex test scenarios, ongoing skepticism toward AI reliability in the enterprise, and novel AI-specific cyber threats. The continued evolution of AI will further solidify and grow its role in software quality and security. However, AI success depends on striking the right balance between leveraging its capabilities and acknowledging its limitations.…