Author: HackWatchit

Enterprises lack visibility into their own data, creating security risks that are compounding as organizations and their employees increase AI adoption, according to Bedrock Security. The majority of organizations struggle to track sensitive information across sprawling cloud environments, leaving them vulnerable to data breaches and compliance failures. The research also documents a significant shift in security roles, with nine in 10 professionals surveyed reporting their responsibilities have evolved in the past year, most notably in data governance and AI oversight. The data visibility problem 82% of cybersecurity professionals report gaps in finding and classifying organizational data across production, customer and…

Sean Verity // GraphQL is one of those technologies that I heard about several years ago but had not encountered during an actual pentest. After reading a blog or two, I remember thinking “JSON, database queries, got it” and then I moved on. I didn’t see GraphQL during an actual pentest until about a month ago. There were a few pain points that I worked through to bootstrap my GraphQL pentesting chops. Hopefully, I can help you avoid these same pain points when you come across GraphQL for the first time during a pentest, bug bounty hunt, or CTF. There…

A new phishing campaign is targeting SEO professionals with malicious Semrush Google Ads that aim to steal their Google account credentials. Malwarebytes researcher Jerome Segura and SEO strategist Elie Berreby believe that the threat actor is after Google Ads accounts that would enable them to create new malvertising campaigns. This type of “cascading fraud” has been gaining traction recently, as Malwarebytes uncovered in January a similar operation where fake Google Ads hosted on Google Sites targeted Google Ads accounts. “We believe the criminals behind it likely regrouped and switched to a less direct approach, yet one that might deliver just as much,” explains Malwarebytes. In…

ServiceNow vulnerability alert: Hackers are actively exploiting year-old flaws (CVE-2024-4879, CVE-2024-5217, CVE-2024-5178) for database access. Learn how to protect your systems. Security researchers at threat intelligence firm GreyNoise have issued a warning regarding a significant increase in malicious activity targeting three previously disclosed vulnerabilities within ServiceNow- a cloud-based platform that helps organizations automate and manage their digital workflows. These vulnerabilities, identified as CVE-2024-4879, CVE-2024-5217, and CVE-2024-5178, were initially revealed by Assetnote’s security researcher Adam Kues in May 2024 and subsequently patched by ServiceNow in July 2024. Despite the availability of patches, GreyNoise has observed a “resurgence of in-the-wild activity” aimed…

Introduction: Increasing Demand for AI-Enhanced Cybersecurity Enterprise security programs are evolving rapidly by embracing the new-generation AI technologies, including generative AI (GenAI) which offer numerous benefits, but also present new risks and threats. This two-sided sword has become a major concern for executives. One proven strategy, Zero Trust, is essential to address these new risks because it involves continuous verification and never trust, thus ensuring the protection of your information in the age of AI. Section 1: The Importance of Zero Trust Why Executives Should Be Concerned Zero Trust is crucial for executives to understand and embrace, and it ensures…

While working at a biotech company, we aim to advance ML & AI Algorithms to enable, for example, brain lesion segmentation to be executed at the hospital/clinic location where patient data resides, so it is processed in a secure manner. This, in essence, is guaranteed by federated learning mechanisms, which we have adopted in numerous real-world hospital settings. However, when an algorithm is already considered as a company asset, we also need means that protect not only sensitive data, but also secure algorithms in a heterogeneous federated environment. Fig.1 High-level workflow and attack surface. Image by author Most algorithms are…

ORIGINALLY AIRED ON JULY 11, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Cons, China, and Florida Man, oh my! 07:03 – Story # 1: North Korean Hackers Target US Health Providers With ‘Maui’ Ransomware – https://www.infosecurity-magazine.com/news/north-korea-us-maui-ransomware/ 10:29 – Story # 2: Ransomware, hacking groups move from Cobalt Strike to Brute Ratel – https://www.bleepingcomputer.com/news/security/ransomware-hacking-groups-move-from-cobalt-strike-to-brute-ratel/ 24:24 – Story # 3: DoD issues call for hackers to dig into networks – https://therecord.media/dod-issues-call-for-hackers-to-dig-into-networks/ 29:21 – Story # 3b: Department of Justice Announces New Policy for Charging Cases under the Computer Fraud and Abuse Act – https://www.justice.gov/opa/pr/department-justice-announces-new-policy-charging-cases-under-computer-fraud-and-abuse-act 33:15 – Story #…

Cisco Talos discovered a malicious campaign tracked under the UAT-5918 umbrella, which has been active since at least 2023. The UAT-5918 hacker is believed to be motivated by the goal of establishing long-term access for information theft, using a combination of web shells and open-source tools to conduct post-compromise activities, with the aim to establish persistence in victim environments for information theft and credential harvesting. It is assessed that UAT-5918’s post-compromise activities, tactics, techniques, and procedures (TTPs), as well as its victimology, overlap the most with the intrusions of Volt Typhoon, Flax Typhoon, Earth Estries, and Dalbit observed in the…

Artificial intelligence (AI)’s ability to analyze vast datasets, predict potential failures, and automate routine tasks makes it indispensable to cybersecurity—specifically network security. AI will play a vital role in securing networks, helping operators detect suspicious activity, identify breaches, and even automate incident response through predefined security protocols, reducing the time it takes to mitigate threats. While businesses are eager to accelerate AI adoption, many struggle with implementation because of several misalignments between their network engineers and executives. A research report titled “AI-Driven Network Management—A Global Perspective on Adoption and Innovation,” which surveyed 513 Chief Information Officers (CIOs) and Chief Security…