Author: HackWatchit

In this Help Net Security interview, Sunil Mallik, CISO of Discover Financial Services, discusses cybersecurity threats for financial institutions. He also shares insights on balancing compliance with agility, lessons from regulatory audits, and Discover’s approach to risk management and workforce development. What are the most pressing security threats facing credit card and digital banking platforms, and how should organizations adapt defenses to counter them? The most pressing security threats facing credit card companies and digital banking platforms include sophisticated social engineering attacks, payment fraud and account takeover (ATO) fraud. To counter these threats, financial services organizations should implement advanced threat…

Image: TechCrunch (CC BY 2.0)French authorities have allowed Pavel Durov, Telegram’s CEO and founder, to temporarily leave the country while criminal activity on the messaging platform is still under investigation. Earlier today, Durov revealed in a Telegram post that he had returned to Dubai after reportedly leaving France from Le Bourget Airport outside Paris. An official at the Paris prosecutor’s office told Bloomberg that the judicial order restricting Durov from traveling outside France during the Telegram criminal investigation was suspended between March 15 and April 7. “As you may have heard, I’ve returned to Dubai after spending several months in…

25 Oct 2022 Talkin’ About Infosec News – 10/17/2022 DevOps for Hackers with Hands-On Labs w/ Ralph May (4-Hour Workshop) Looking For Something?Browse by category Select Category Alyssa Snow  (7) Ashley Knowles  (1) Ashley Van Hoesen  (1) Author  (402) Backdoors & Breaches  (7) Beau Bullock  (32) Ben Bowman  (1) Ben Burkhart  (1) Blue Team  (101) Blue Team Tools  (40) Brian Fehrman  (18) Brian Ireland  (1) Brian King  (20) Bronwen Aker  (1) C2  (29) Cameron Cartier  (2) Carrie Roberts  (5) Chris Sullo  (1) Chris Traynor  (2) CJ Cox  (8) Connor Costigan  (1) Corey Ham  (4) Craig Vincent  (2) Dale Hobbs  (3) Daniel Pizarro  (1) Darin Roberts  (1) Dave Blandford  (2) David Fletcher  (30) David Perez  (1) Deb Wigley  (1) Debjeet Banerjee  (1) Derek Banks  (13) Derrick Rauch  (1) DFIR  (1) DNSTAP  (1) Ethan Robish  (14) External/Internal  (67) Fernando…

Editor’s note: This report was authored by Gautham Ashok & Alexa Feminella. Key Findings Even years after their disclosure, VPN-related vulnerabilities like CVE-2018-13379 and CVE-2022-40684 remain essential tools for attackers, driving large-scale campaigns of credential theft and administrative control. VPN infrastructure has become an adversary focal point, blending cybercriminal tactics with state-sponsored espionage in hybrid operations. Our investigations into the reasons behind these attacks reveal a 4,223% growth in chatter on cybercriminal forums related to specifically Fortinet VPNs since 2018, underscoring threat actors’ increasing focus on exploiting VPN vulnerabilities. To help you understand the scale and tactics behind this trend,…

Check Point is honored to be featured as a Gold Winner for Cloud Security in the 2025 Globee Cybersecurity Awards. Check Point’s CloudGuard platform distinguished itself for its preventive approach to cloud security, focusing on stopping cyber attacks before they infiltrate cloud environments in the first place. CloudGuard’s end-to-end suite of advanced cloud security solutions, including web application firewall (WAF), automated network security, cloud detection and response (CDR), and code security, enables organizations to enact a unique, AI-powered approach that prioritizes risk management and threat prevention, reducing overall risk profiles for organizations globally. The Globee® Awards for Cybersecurity spotlight the…

There’s good news on the horizon for Chromecast owners frustrated that their devices have stopped streaming and begun showing error messages instead: Google says it has started pushing out a fix.As Iain Thomson of The Register reports, the company says that its deployment of a fix for the crippled devices will roll out in stages over the next few days:Although there’s no official message on the support page as yet, Google has confirmed to us it will push out a patch over the internet to people’s Chromecasts during the next few days to address the error. Leaving your ‘cast powered…

President Donald Trump has nominated Federal Reserve Governor Michelle (Miki) Bowman to be the Fed’s next vice chair of supervision. Trump announced the selection Monday (March 17) in a post on Truth Social. “Miki has been serving honorably on the Fed’s Board of Governors since 2018, and has great expertise dealing with Inflation, Regulation and Banking,” Trump wrote in the post. “Our Economy has been mismanaged for the past four years, and it is time for a change. Miki has the ‘know-how’ to get it done.” It was reported March 11 that Bowman was the front-runner to become the next…

Threat actors rapidly exploit new Apache Tomcat flaw following PoC release Pierluigi Paganini March 17, 2025 Threat actors began exploiting a recently disclosed Apache Tomcat vulnerability immediately after the release of a PoC exploit code. A newly disclosed Apache Tomcat vulnerability, tracked as CVE-2025-24813, is being actively exploited just 30 hours after a public PoC was released. The issue is a path equivalence flaw in Apache Tomcat that allows remote code execution or information disclosure if specific conditions are met. The vulnerability affects multiple versions including 11.0.0-M1 to 11.0.2, 10.1.0-M1 to 10.1.34, and 9.0.0.M1 to 9.0.98. Exploitation requires write-enabled default servlet,…

The post Identity Life Cycle and Privileged Account Management appeared first on Cybersecurity Exchange.