Author: HackWatchit

In recent years, T-Mobile has faced a series of high-profile data breaches that have raised concerns about the security of both customer and employee information. In response, the company has rolled out a new security feature aimed at bolstering its defenses, requiring all employees to enroll in the CLEAR Identity Verification Program. Originally slated to be fully implemented by the third week of March, this security initiative is designed to ensure that only authorized personnel have access to sensitive company data and systems, effectively filtering out unauthorized logins. The CLEAR Identity program, which offers a robust platform for verifying the…

Nowadays, a large amount of data is collected on the internet, which is why companies are faced with the challenge of being able to store, process, and analyze these volumes efficiently. Hadoop is an open-source framework from the Apache Software Foundation and has become one of the leading Big Data management technologies in recent years. The system enables the distributed storage and processing of data across multiple servers. As a result, it offers a scalable solution for a wide range of applications from data analysis to machine learning. This article provides a comprehensive overview of Hadoop and its components. We…

A new Android spyware named ‘KoSpy’ is linked to North Korean threat actors who have infiltrated Google Play and third-party app store APKPure through at least five malicious apps. According to Lookout researchers, the spyware is attributed to the North Korean threat group APT37 (aka ‘ScarCruft’). The campaign has been active since March 2022, with the threat actors actively developing the malware based on newer samples. The spyware campaign primarily targets Korean and English-speaking users by disguising itself as file managers, security tools, and software updaters. The five apps Lookout identified are 휴대폰 관리자 (Phone Manager), File Manager (com.file.exploer), 스마트 관리자 (Smart Manager), 카카오 보안…

12 Jan 2023 Informational, InfoSec 101, News, Podcasts 00:00 – PreShow Banter™ — Twitch Airways International00:59 – BHIS – Talkin’ Bout [infosec] News 2023-01-1003:56 – Story # 1: How ChatGPT could become a hacker’s friendhttps://betanews.com/2023/01/05/how-chatgpt-could-become-a-hackers-friend/14:05 – Story # 2: Cybersecurity experts gaze into the 2023 crystal ball and see good, bad, uglyhttps://armerding.medium.com/cybersecurity-experts-gaze-into-the-2023-crystal-ball-and-see-good-bad-ugly-b5f958b89b3116:40 – Story # 3: Chick-Fil-A and other Breaches to snack onhttps://www.bleepingcomputer.com/news/security/chick-fil-a-investigates-reports-of-hacked-customer-accounts/31:01 – Story # 4: Identity Thieves Bypassed Experian Security to View Credit Reportshttps://krebsonsecurity.com/2023/01/identity-thieves-bypassed-experian-security-to-view-credit-reports/36:29 – Story # 5: CircleCI security alert: Rotate any secrets stored in CircleCI (Updated Jan 7)https://circleci.com/blog/january-4-2023-security-alert/40:45 – Story # 6: Air France and KLM…

Following last month’s research on a new campaign by the Chinese threat actor Silver Fox, which exploited Philips DICOM viewers to infect victims with a backdoor trojan, Forescout Technologies reported that this discovery emerged from a threat hunt for malicious software on VirusTotal (VT). In its latest follow-up analysis, the search methodology is expanded upon, detailing the process of searching for malware on VT.  The approach involved leveraging eyeInspect’s and REM’s list of default credentials, along with a database of the most popular medical software names observed in healthcare environments, to identify malware exhibiting specific behaviors: masquerading as legitimate healthcare…

Confidentiality is a fundamental pillar of information security. In sensitive deployments, such as those involving federal governments, military and defense agencies, and large financial institutions, the demand for confidentiality extends well beyond the typical 5 to 10 years, often reaching 20 years or more. The same also applies to telecom operators and enterprises providing services to any of these critical agencies. With the existing classical computers, this requirement of forward secrecy for encryption could be met easily as breaking the asymmetric cryptography (deriving the private key for a given public key) would take well beyond the timelines needed to maintain…

Apple fixed the third actively exploited zero-day of 2025 Pierluigi Paganini March 11, 2025 Apple addressed a zero-day vulnerability, tracked as CVE-2025-24201, that has been exploited in “extremely sophisticated” cyber attacks. Apple has released emergency security updates to address a zero-day vulnerability, tracked as CVE-2025-24201, in the WebKit cross-platform web browser engine. The vulnerability is an out-of-bounds write issue that was exploited in “extremely sophisticated” attacks. An attacker can exploit the vulnerability using maliciously crafted web content to escape the Web Content sandbox. Apple released this fix as an additional measure after blocking a similar attack in iOS 17.2. “Maliciously…

87% of companies have, or are in the midst of, rolling out passkeys with goals tied to improved user experience, enhanced security, and compliance, according to the FIDO Alliance. Key findings Enterprises understand the value of passkeys for workforce sign-ins. Most decision makers (87%) report deploying passkeys at their companies. Of these, 47% report rolling out a mix of device-bound passkeys (on physical security keys and/or cards) and synced passkeys (synced securely across the user’s devices). Organizations are prioritizing passkey rollouts to users with access to sensitive data and applications, including the three most commonly cited priority groups: Those requiring…

Technologies such as Low-Code/No-Code (LCNC) and Robotic Process Automation (RPA) have become fundamental in the digital transformation of companies. They continue to evolve and redefine software development, providing new possibilities for different organizations. It allows users with no programming experience (citizen developers) to create applications and automate processes, simplifying complex tasks and optimizing business operations. Application platforms for these technologies offer intuitive visual interfaces. These allow anyone, from a business professional to an IT employee, to develop customized applications and automate repetitive processes quickly and efficiently. Despite their advantages, the use of these technologies has challenges, especially regarding information security. These platforms,…