Author: HackWatchit

The post Talkin’ About Infosec News – 9/13/2022 appeared first on Black Hills Information Security.

GitGuardian’s State of Secrets Sprawl 2025 report shows no progress in combating secrets sprawl, with 23.8 million secrets leaked on public GitHub repositories in 2024—a 25% year-over-year increase. Despite GitHub Push Protection’s efforts, secrets sprawl is accelerating, especially with generic secrets, which made up 58% of all leaked credentials. More troubling, 70% of secrets leaked in 2022 remain active, significantly expanding the attack surface for threat actors. The report makes one thing clear: secrets management must evolve beyond detection. Organizations must proactively prevent, discover, detect, and remediate leaked credentials before exploitation. GitGuardian recommends a multi-layered approach to secrets security: Deploy…

California Cryobank, the largest US sperm bank, disclosed a data breach Pierluigi Paganini March 19, 2025 California Cryobank, the largest US sperm bank, suffered a data breach exposing customer information. California Cryobank (CCB) is the largest sperm bank in the U.S., providing frozen donor sperm and reproductive services, including egg and embryo storage. It operates in all 50 states and over 30 countries worldwide, helping individuals and couples with fertility treatments. The company disclosed a data breach that exposed customers’ personal information. The company did not dislose technical details about the attack. CCB discovered unauthorized activity on its IT systems…

A newly discovered information-stealing malware called Arcane is stealing extensive user data, including VPN account credentials, gaming clients, messaging apps, and information stored in web browsers. According to Kaspersky, the malware has no links or code that overlaps with the Arcane Stealer V, which has been circulating on the dark web for years. The Arcane malware campaign started in November 2024, having gone through several evolutionary steps, including primary payload replacements. All conversations and public posts by its operators are in Russian, with Kaspersky’s telemetry showing that most Arcane infections are in Russia, Belarus, and Kazakhstan. This is particularly notable,…

Cydome’s maritime cyber research team just published an analysis of the cyber attack by Lab Dookhtegan on Iranian oil tankers that claimed to disrupt the operation of 116 oil vessels. These oil tanker ships are said to belong to two Iranian companies associated with the government and allegedly operating against international sanctions. The group claims that the attack prevented communications both on the ship and ship-to-shore (Satcom). “In this recent attack, Lab Dookhtegan claimed on their Telegram channel that they managed to completely disrupt the external and internal communications of 116 oil tankers belonging to Iranian government-owned companies,” Cydome said…

Austin, TX, United States, March 19th, 2025, CyberNewsWire The average corporate user now has 146 stolen records linked to their identity, an average 12x increase from previous estimates, reflecting a surge in holistic identity exposures. SpyCloud, the leading identity threat protection company, today released its 2025 SpyCloud Annual Identity Exposure Report, highlighting the rise of darknet-exposed identity data as the primary cyber risk facing enterprises today. As cybercriminals move beyond single data points and leverage stolen data from a number of sources – breaches, malware and phishes – they are embracing a more sophisticated approach to identity exploitation, and organizations…

A Game-Changer for Scalable Storage on Solana:Xandeum Introduces pNodes How can a blockchain handle massive data without slowing down? Xandeum Labs has introduced pNodes (Provider Nodes) on its devnet, marking a major advancement in decentralized storage for Solana smart contracts. Designed to integrate a scalable, random-access storage layer, pNodes address one of Solana’s key challenges: enabling efficient and scalable data storage. Solana processes transactions at high speed with low fees, supporting over 4 billion transactions on its devnet to date. However, its validators struggle to store large datasets, capping the potential of decentralized applications (dApps). Xandeum’s pNodes create a random-access…

HP this week announced a new family of printers that include features to protect them against cyberthreats expected to arrive with quantum computing, which given recent breakthroughs could arrive sooner than many think.While the technology promises huge advances in everything from drug discovery to machine learning to supply chain management, it also likely could break modern encryption methods, putting vast amounts of data at risk of exposure and theft.“A sufficiently powerful quantum computer could break much of the cryptography relied upon globally,” Tommy Charles and Thalia Laing, researchers with HP Security Lab, wrote in a report accompanying HP’s announcement. “Given…

Ray Felch // 2022 BHIS CyMon badge Recently, it was suggested that it would be cool to create a hardware badge for one of the upcoming InfoSec conferences. Admittedly, I have a pretty solid background in electronic circuit design and software development; however, a conference hardware badge was a relatively new concept to me.  Fortunately for me, I have a son that’s been working in the Information Security environment for a number of years and is also an avid collector of conference badges. After checking out some of the badges in his collection and conducting many Google searches, I soon…