Author: HackWatchit

Utah lawmakers approved legislation late Friday, aimed at providing regulatory clarity but removed a pivotal provision that would have allowed the state to invest public funds directly into crypto.H.B. 230—Blockchain and Digital Innovation Amendments passed Utah’s Senate by a 19-7 vote after legislators amended it to eliminate language that would have authorized Utah’s state treasurer to allocate state-managed funds toward a Bitcoin reserve. Later that night, the House concurred with the Senate’s revisions, approving the bill 52-19, with four abstentions.Initially introduced by Rep. Jordan Teuscher (R-Utah) and sponsored in the Senate by Sen. Kirk Cullimore (R-Utah), the amended legislation still contains…

The February Patch Tuesday updates and activity during the month marked a return to normalcy for patch management. Following the January updates addressing 100+ vulnerabilities, we saw 37 CVEs fixed in Windows 11 and 33 CVEs in Windows 10. This was rounded out by 8 CVEs addressed in the Office 365 online versions and Office 2016 in standalone form. Microsoft made a few announcements and fixes in the last month you should be aware of. A January non-security update and February security update for the operating system impacted some drag-and-drop functionality in Outlook. This has been resolved in the March…

A new open-source tool named ‘Chirp’ transmits data, such as text messages, between computers (and smartphones) through different audio tones. The tool, developed by cybersecurity researcher solst/ICE, maps each character into a specific sound frequency and plays it along with real-time visualization. Other microphone-equipped computers running Chirp may capture the sound and translate the message back into text. The project allows users to “sneak” messages between devices in a fun way, and it’s available both online and as a standalone app available for free through GitHub. Although it’s not overly practical for most real-world applications due to background noise interference, it…

Senator Ron Wyden of Oregon, a renowned privacy hawk who has served on the Senate intelligence committee since just after 9/11, has referred to the new provision as “one of the most dramatic and terrifying expansions of government surveillance authority in history.”Declassifying the new types of businesses that can actually be considered an ECSP is an essential step in bringing about clarity to an otherwise nebulous change in federal surveillance practices, according to the ACLU and the other organizations joined in its effort. “Without such basic transparency, the law will likely continue to permit sweeping NSA surveillance on domestic soil…

Joseph Kingstone // Looking to get into physical security? Not sure what you need to get started? Look no further.  What are Physical Security Assessments?   Physical security assessments evaluate an organization’s physical security measures to identify potential risks and vulnerabilities that could compromise the safety and security of its people, assets, and facilities. The assessment typically involves a combination of physical inspections, bypasses/lockpicking, tailgating, and access control abuse to name a few. This assists in assessing the effectiveness of existing security measures and identifying areas for improvement.   This is a basic list of tools, where to get them, and videos…

Japanese telecom giant NTT suffered a data breach that impacted 18,000 companies Pierluigi Paganini March 08, 2025 A data breach suffered by the Japanese telecom giant NTT exposed information of nearly 18,000 corporate customers. Japanese telecom giant NTT suffered a data breach that exposed information of nearly 18,000 corporate customers. On February 5th, the security team detected suspicious activity in its ‘Order Information Distribution System,’ and immediately restricted access to device A. “NTT Communications Corporation (NTT Com) discovered that its facilities had been illegally accessed on February 5, and confirmed on February 6 that some information may have been leaked…

Cybersecurity has become an important element of business continuity. Regardless of the industry, all organizations operate in increasingly hazardous environments, with significant threats like ransomware impacting millions of businesses every year. However, while these threats are very real, your business shouldn’t operate in fear. With the right knowledge and tools, you can have more confidence in your organization’s ability to minimize its attack surface or even recover successfully in the event of an attack. To get to this point, however, there are some fundamental strategies and best practices you should be deploying. Identify the Warning Signs One of the most…

22 Feb 2023 Informational, InfoSec 101, News, Podcasts 00:00 – PreShow Banter™ — Pop Tart Pizza04:15 – BHIS – Talkin’ Bout [infosec] News 2023-02-2005:39 – Story # 1: Employee data from a major cybersecurity firm posted for sale on a hacker forumhttps://twitter.com/FalconFeedsio/status/162686144278689382413:43 – Story # 2: FBI is investigating a cybersecurity incident on its networkhttps://www.bleepingcomputer.com/news/security/godaddy-hackers-stole-source-code-installed-malware-in-multi-year-breach/16:44 – Story # 3: GoDaddy: Hackers stole source code, installed malware in multi-year breachhttps://www.bleepingcomputer.com/news/security/godaddy-hackers-stole-source-code-installed-malware-in-multi-year-breach/21:44 – Story # 4: Hyundai, Kia pushing updates so you can’t just steal their cars with USB cableshttps://arstechnica.com/cars/2023/02/hyundai-kia-pushing-updates-so-you-cant-just-steal-their-cars-with-usb-cables/30:21 – Story # 5: Eurostar forces ‘password resets’ — then fails and locks…

Authors/Presenters: Matt Broomhall & Richard DeVere Our thanks to Bsides Exeter, and the Presenters/Authors for publishing their timely Bsides Exeter Conference content. All brought to you via the organizations YouTube channel. Permalink *** This is a Security Bloggers Network syndicated blog from Infosecurity.US authored by Marc Handelman. Read the original post at: https://www.youtube-nocookie.com/embed/oy4yadgKuCQ?si=z-jGBn7dNph6czuG