Author: HackWatchit

In the second part of its four-part series on analysis of the Windows CE attack surface, a legacy OS still found in many OT (operational technology) environments, Claroty, a cyber-physical systems (CPS) protection firm, provided analysis of Windows CE debugging constructs. During the research, two interesting proprietary control and debugging protocols were discovered and analyzed. The post shares the research process that was later used to build custom research utilities. “Visual Studio comes bundled with a built-in debugging utility allowing you to debug remote device applications over ethernet,” Tomer Goldschmidt, a Claroty vulnerability researcher, wrote in a Wednesday blog post.…

Cryptocurrency isn’t just a buzzword anymore. By December 2024, the number of global cryptocurrency owners reached approximately 659 million, marking a 13% increase from January 2024. That might not sound like a massive chunk, but it still represents millions of individuals who want to protect their virtual holdings. Where regular banking once ruled, self-managed wallets are now front and center for those who prefer having full control of their tokens. Part of the appeal is the chance to bypass middlemen. However, questions arise on the best way to handle security—especially for people who want quick access to their coins while…

30 Nov 2022 Informational, InfoSec 101, News, Podcasts 00:00 – PreShow Banter™ — Inflatable Turkey00:15 – BHIS – Talkin’ Bout [infosec] News 2022-11-2802:34 – Story # 1: Musk recruits engineers for “Twitter 2.0”https://arstechnica.com/tech-policy/2022/11/musk-recruits-engineers-for-twitter-2-0-after-mass-layoffs-and-resignations/06:28 – Story # 2: Security experts are laying Mastodon’s flaws barehttps://www.techradar.com/news/security-experts-are-laying-mastodons-flaws-bare15:01 – Story # 3: 5.4 million Twitter users’ stolen data leaked online — more shared privatelyhttps://www.bleepingcomputer.com/news/security/54-million-twitter-users-stolen-data-leaked-online-more-shared-privately/18:23 – Story # 4: 34 Russian Cybercrime Groups Stole Over 50 Million Passwords with Stealer Malwarehttps://thehackernews.com/2022/11/34-russian-hacker-groups-stole-over-50.html19:48 – Story # 5: Sonder confirms data breach, documents and other PII potentially compromisedhttps://www.infosecurity-magazine.com/news/sonder-confirms-data-breach/27:49 – Story # 6: Why Medibank should have paid the…

U.S. CISA adds Apple products and Juniper Junos OS flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 14, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products and Juniper Junos OS flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability The vulnerability CVE-2025-21590 is an Improper Isolation or Compartmentalization issue in the kernel of Juniper Networks Junos OS that allows a local attacker with high privileges to compromise the…

In recent years, Parquet has become a standard format for data storage in Big Data ecosystems. Its column-oriented format offers several advantages: Faster query execution when only a subset of columns is being processed Quick calculation of statistics across all data Reduced storage volume thanks to efficient compression When combined with storage frameworks like Delta Lake or Apache Iceberg, it seamlessly integrates with query engines (e.g., Trino) and data warehouse compute clusters (e.g., Snowflake, BigQuery). In this article, the content of a Parquet file is dissected using mainly standard Python tools to better understand its structure and how it contributes…

Microsoft has reinstated the ‘Material Theme – Free’ and ‘Material Theme Icons – Free’ extensions on the Visual Studio Marketplace after finding that the obfuscated code they contained wasn’t actually malicious. The two VSCode extensions, which count over 9 million installs, were pulled from the VSCode Marketplace in late February over security risks, and their publisher, Mattia Astorino (aka ‘equinusocio’) was banned from the platform. “A member of the community did a deep security analysis of the extension and found multiple red flags that indicate malicious intent and reported this to us,” stated a Microsoft employee at the time. “Our…

What if the smart thermostat in your home decides that winter is the perfect time for you to experience tropical heat or your self-driving car interprets a stop sign as a green light? These unstable situations sound scary like science fiction, but it highlights the threats that surround artificial intelligence of things (AIoT) systems. Numerous devices today that shape modern life, such as smart homes, industrial machines, smart gadgets, healthcare systems, etc., are powered by AIoT (AI and IoT) devices. The technological advancements undoubtedly promise unmatched convenience and efficiency, but at the same time expose us to complex vulnerabilities. In…

SecureAcademy recently hosted its first-ever Global Cyber Range Challenge, a virtual event designed to provide cyber security students and enthusiasts with real-world, hands-on experience. With participants from 11 countries and 12 academic institutions, the event showcased the power of immersive learning using one of Cyber Park’s gamified experiences to prepare the next generation of cyber defenders. These experiences include Red Team-Blue Team, CTF-style cyber ranges, and introductory escape rooms. The cyber ranges serve as a “flight simulator” for cyber security professionals, providing a gamified, lifelike environment to test and refine their skills. SecureAcademy, part of Infinity Global Services alongside Cyber…

On March 12, 2025, The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released a Cybersecurity Advisory (CSA) to disseminate known Medusa ransomware IOCs and TTPs that have been identified through FBI investigations as recently as February 2025. This joint CSA is a continuation of CISA’s ongoing #StopRansomware effort to arm defenders with the intelligence they need to combat different ransomware variants and ransomware threat actors. Medusa is a Ransomware-as-a-Service (RaaS) operation that has been active since June 2021 targeting Windows-based environments. At the time of writing, Medusa…