Author: HackWatchit
While cybercriminals innovate at lightning speed, cybersecurity teams—led by Chief Information Security Officers (CISOs)—often find themselves relying on outdated playbooks. Cyber insurance, once viewed as the ultimate safety net, is no exception. Findings from our recent survey conducted by Wakefield Research illuminate glaring challenges in how these leaders understand and leverage their cyber insurance policies. Cyber Insurance: A Constant Balancing Act According to the survey, two-thirds of CISOs (68%) frequently or constantly evaluate new security solutions to reduce their cyber insurance premiums. This statistic reflects not just a diligent effort to manage costs but also a recognition of the precarious financial balancing act many…
Invisible C2 — thanks to AI-powered techniques Just about every cyberattack needs a Command and Control (C2) channel — a way for attackers to send instructions to compromised systems and receive stolen data. This gives us all a chance to see attacks that are putting us at risk. LLMs can help attackers avoid signature based detection Traditionally, C2 traffic might be disguised as normal web traffic, DNS queries, or go through known platforms like Slack or Telegram. Now, LLMs are helping attackers to even better hide C2 communications in plain sight and even to automate the decision-making on the attacker’s behalf, reducing or eliminating the…
Sugarverse, a Web3 gaming studio based in Sofia, has completed a $1 million funding round to support its work on blockchain-based games. The studio plans to use the money to develop titles with economies designed to reward players over time, starting with Sugar Match, a mobile game set to launch on the Tezos Layer-2 network Etherlink this summer. Data from Statista shows the global mobile gaming market reached $124 billion in 2024, with projections to hit $150 billion by 2027, signaling a growing space where Sugarverse aims to make its mark. The funding arrives as Web3 gaming grapples with questions…
GenAI systems affect how we work. This general notion is well known. However, we are still unaware of the exact impact of GenAI. For example, how much do these tools affect our work? Do they have a larger impact on certain tasks? What does this mean for us in our daily work? To answer these questions, Anthropic released a study based on millions of anonymized conversations on Claude.ai. The study provides data on how GenAI is incorporated into real-world tasks and reveals actual GenAI usage patterns. In this article, I will go through the four main findings of the study. Based on…
Microsoft says it partially mitigated a week-long Exchange Online outage causing delays or failures when sending or receiving email messages. While the company didn’t publicly share information on this incident, it tagged it as a critical service issue tracked under EX1027675 on the Microsoft 365 Admin Center. Microsoft has yet to share more information on what regions were affected by this outage, but it said the incident impacted “any user serviced by the impacted portion of infrastructure.” Customers worldwide also reported experiencing email delivery failures over the last week, with those impacted saying they were receiving a Non-Delivery Report (NDR)…
25 Oct 2022 Webcast: Offensive Windows Event Logs w/ Tim Fowler Talkin’ About Infosec News – 11/1/2022 Looking For Something?Browse by category Select Category Alyssa Snow (7) Ashley Knowles (1) Ashley Van Hoesen (1) Author (402) Backdoors & Breaches (7) Beau Bullock (32) Ben Bowman (1) Ben Burkhart (1) Blue Team (101) Blue Team Tools (40) Brian Fehrman (18) Brian Ireland (1) Brian King (20) Bronwen Aker (1) C2 (29) Cameron Cartier (2) Carrie Roberts (5) Chris Sullo (1) Chris Traynor (2) CJ Cox (8) Connor Costigan (1) Corey Ham (4) Craig Vincent (2) Dale Hobbs (3) Daniel Pizarro (1) Darin Roberts (1) Dave Blandford (2) David Fletcher (30) David Perez (1) Deb Wigley (1) Debjeet Banerjee (1) Derek Banks (13) Derrick Rauch (1) DFIR (1) DNSTAP (1) Ethan Robish (14) External/Internal (67) Fernando Panizza (1) Finding (10) Fun…
Experts warn of a coordinated surge in the exploitation attempts of SSRF vulnerabilities Pierluigi Paganini March 13, 2025 Researchers warn of a “coordinated surge” in the exploitation attempts of SSRF vulnerabilities in multiple platforms. Threat intelligence firm GreyNoise observed Grafana path traversal exploitation attempts before the Server-Side Request Forgery (SSRF) surge on March 9, suggesting the attackers may be leveraging Grafana as an initial entry point for deeper exploitation. The experts believe the attempts are the result of a coordinated attack, threat actors first scan exposed infrastructure before escalating their efforts. In past attacks, attackers exploited Grafana vulnerabilities to access…
Over the past decade, encrypted communication has become the norm for billions of people. Every day, Signal, iMessage, and WhatsApp keep billions of messages, photos, videos, and calls private by using end-to-end encryption by default—while Zoom, Discord, and various other services all have options to enable the protection. But despite the technology’s mainstream rise, long-standing threats to weaken encryption keep piling up.Over the past few months, there has been a surge in government and law enforcement efforts that would effectively undermine encryption, privacy advocates and experts say, with some of the emerging threats being the most “blunt” and aggressive of…
55-year old Davis Lu, of Houston, Texas, has been found guilty of intentionally causing damage to the computer systems of his ex-employer, and could face up to 10 years in prison.Lu had been employed as a software developer between 2007 and 2019 by multinational firm Eaton, which provides energy-efficient solutions for the aerospace, automotive and other industries.However, when Lu’s responsibilities were reduced in a restructuring of the organisation, and driven by concern that Eaton would no longer want to employ him, he began to sabotage the company’s network.According to a press release by the US Department of Justice (DOJ), by…