Author: HackWatchit

A recent report from Nozomi Networks Labs, based on an analysis of over 500,000 wireless networks worldwide, reveals that only 6% are adequately protected against wireless deauthentication attacks. Most wireless networks, including those in mission-critical environments, remain highly exposed to these attacks. In healthcare, for example, vulnerabilities in wireless networks could lead to unauthorized access to patient data or interference with critical systems. Similarly, in industrial environments, these attacks could disrupt automated processes, halt production lines, or create safety hazards for workers. Key threats to industrial wireless environments Deauthentication attacks exploit weaknesses in network protocols to forcibly disconnect devices from…

Researchers from Forescout Technologies‘ Forescout Research – Vedere Labs identified a series of intrusions exploiting two Fortinet vulnerabilities between late January and early March. The attacks started with the compromise of Fortigate firewall appliances and ultimately led to the deployment of a newly discovered ransomware strain, which has been named SuperBlack. The ransomware strain observed in these incidents closely resembles LockBit 3.0 (LockBit Black).  “The primary differences lie in the ransom note left after encryption and a custom data exfiltration executable,” Sai Molige and researchers from Vedere Labs wrote in a Wednesday blog post. “Due to these modifications, we have…

1 Nov 2022 InfoSec 101, News, Podcasts 00:00 – PreShow Banter™ — Spook Show00:58 – BHIS – Talkin’ Bout [infosec] News 2022-10-3104:00 – Story # 1: OpenSSL warns of critical security vulnerability with upcoming patch– https://www.zdnet.com/article/openssl-warns-of-critical-security-vulnerability-with-upcoming-patch/04:42 – Story # 1b: Notes on OpenSSL remote memory corruption– https://guidovranken.com/2022/06/27/notes-on-openssl-remote-memory-corruption/12:28 – Story # 2: GitHub Bug Exposed Repositories to Hijacking– https://www.infosecurity-magazine.com/news/github-bug-hackers-hijack/16:20 – Story # 3: Gartner Identifies the Top 10 Strategic Technology Trends for 2023– https://www.gartner.com/en/newsroom/press-releases/2022-10-17-gartner-identifies-the-top-10-strategic-technology-trends-for-202325:54 – Story # 4: Former U.K. Prime Minister Liz Truss’ Phone Allegedly Hacked By Kremlin Spies: Report– https://www.forbes.com/sites/daveywinder/2022/10/30/former-uk-prime-minister-liz-trusss-phone-allegedly-hacked-by-kremlin-spies-report/34:45 – Story # 5: New Azov data wiper tries to frame researchers and BleepingComputer– https://www.bleepingcomputer.com/news/security/new-azov-data-wiper-tries-to-frame-researchers-and-bleepingcomputer/…

Cybersecurity company Guardz is warning Microsoft 365 users about a new phishing scam backed by social engineering tactics making the rounds. This isn’t an average scam as attackers trick people into calling fake support numbers using Microsoft 365 infrastructure, putting their login details and accounts at risk. How the Attack Works Unlike typical phishing attempts using typosquatted domains, fake or misspelled email addresses, this campaign operates from within Microsoft’s cloud services. This makes the phishing attempts look convincing, easily bypassing email authentication checks like SPF, DKIM, and DMARC. The attack also utilizes legitimate Microsoft domains (onmicrosoft.com)and manipulates tenant settings. The…

By Matthew DeChant, CEO of Security Counsel In late January, two days into the new administration, the Department of Homeland Security sent out a memo dismissing all private sector experts from its advisory committees, including the Cyber Safety Review Board (CSRB). For years, these committees have added essential private sector expertise to government responses to attacks and vulnerabilities, and helped protect critical infrastructure largely owned by companies and not controlled or directly protected by the government. Healthy democracies were never intended to be solely run by political insiders, and the famous phrase that embodies this is “government of the people,…

As we have already seen with the basic components (Part 1, Part 2), the Hadoop ecosystem is constantly evolving and being optimized for new applications. As a result, various tools and technologies have developed over time that make Hadoop more powerful and even more widely applicable. As a result, it goes beyond the pure HDFS & MapReduce platform and offers, for example, SQL, as well as NoSQL queries or real-time streaming. Hive/HiveQL Apache Hive is a data warehousing system that allows for SQL-like queries on a Hadoop cluster. Traditional relational databases struggle with horizontal scalability and ACID properties in large…

A clever malware deployment scheme first spotted in targeted attacks last year has now gone mainstream. In this scam, dubbed “ClickFix,” the visitor to a hacked or malicious website is asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing malware. ClickFix attacks mimic the “Verify You are a Human” tests that many websites use to separate real visitors from content-scraping bots. This particular scam usually starts with a website popup that looks something like this: This malware attack pretends to be a CAPTCHA intended to separate humans from bots.…

VanEck has submitted an S-1 registration statement to the US Securities and Exchange Commission (SEC) for a proposed Avalanche exchange-traded fund (ETF), aiming to provide investors with direct exposure to AVAX.According to the filing, the VanEck Avalanche ETF will hold AVAX directly and value its shares based on the MarketVector Avalanche Benchmark Rate, which aggregates pricing data from the five largest trading platforms, as determined by CCData’s exchange benchmark report.This filing follows VanEck’s recent registration of the Avalanche ETF in Delaware, signaling the firm’s intent to expand its lineup of crypto investment products.VanEck has yet to disclose the ETF’s ticker…

A large-scale Coinbase phishing attack poses as a mandatory wallet migration, tricking recipients into setting up a new wallet with a pre-generated recovery phrase controlled by attackers. The emails have a subject of “Migrate to Coinbase Wallet” and state that all customers must transition to self-custodial wallets. The email also provides instructions on how to download the legitimate Coinbase Wallet. “As of March 14th, Coinbase is transitioning to self-custodial wallets. Following a class action lawsuit alleging unregistered securities and unlicensed operations, the court has mandated that users manage their own wallets,” reads the Coinbase phishing email. “Coinbase will operate as…