Author: HackWatchit
Jordan Drysdale // Tl;dr: Many parsers have been written and several are referenced here. This blog describes a simple parser for Sysmon logs through Event ID (EID) 28 for Microsoft Sentinel. Let’s start with a description of the Sysmon schema version. As shown below, the latest schema version as of 23-DEC-22 was 4.83. This will need to be updated in your Sysmon config files if you wish to stay bleeding edge. The following blocks include some additions to the version of Sysmon modular generating as of 23-DEC-22. Modular was referenced in a link above, the few lines below allow the…
Palo Alto, Singapore, March 6th, 2025, CyberNewsWire With recent attack disclosures like Browser Syncjacking and extension infostealers, browser extensions have become a primary security concern at many organizations. SquareX’s research team discovers a new class of malicious extensions that can impersonate any extension installed on the victim’s browser, including password managers and crypto wallets. These malicious extensions can morph themselves to have the exact same user interface, icons and text as the legitimate extension, making it an extremely convincing case for victims to enter their credentials and other sensitive information. This attack impacts most major browsers, including Chrome and Edge.…
(This post originally published on 47 Watch) Recent administrative changes at the Social Security Administration (SSA) reveal a concerning pattern of decisions that disproportionately impact vulnerable populations while being implemented in ways that limit public awareness and oversight. Two specific policy reversals highlight this trend: the reinstatement of 100% benefit withholding for overpayments and the termination of “Enumeration at Birth” contracts in several states. The Overpayment Recovery Rate Reversal On March 7, 2025, the SSA quietly announced it would revert to withholding 100% of monthly benefits from recipients with overpayments, effective March 27, 2025. This reverses a significant reform implemented…
The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains an undocumented “backdoor” that could be leveraged for attacks. The undocumented commands allow spoofing of trusted devices, unauthorized data access, pivoting to other devices on the network, and potentially establishing long-term persistence. This was discovered by Spanish researchers Miguel Tarascó Acuña and Antonio Vázquez Blanco of Tarlogic Security, who presented their findings yesterday at RootedCON in Madrid. “Tarlogic Security has detected a backdoor in the ESP32, a microcontroller that enables WiFi and Bluetooth connection and is present in millions of…
Blockchain gaming is supposed to solve the problem of players creating “black markets” for digital items in traditional games, as trading tokenized, user-owned weapons and skins are a key part of open crypto economies.But ahead of the launch of its Avalanche-based GUNZ L1 mainnet and the on-chain item trading and token that’ll come along with it, Off the Grid—one of crypto’s biggest games to date—has found itself in a very familiar “Web2” kind of situation.The battle royale shooter has a bustling black market where players trade skins and GUN tokens for real money. This underground economy has spawned due the…
Security Affairs newsletter Round 514 by Pierluigi Paganini – INTERNATIONAL EDITION | Akira ransomware gang used an unsecured webcam to bypass EDR | Japanese telecom giant NTT suffered a data breach that impacted 18,000 companies | Mirai-based botnets exploit CVE-2025-1316 zero-day in Edimax IP cameras | The Role of Differential Privacy in Protecting Sensitive Information in the Era of Artificial Intelligence | International law enforcement operation seized the domain of the Russian crypto exchange Garantex | Medusa Ransomware targeted over 40 organizations in 2025 | Elastic patches critical Kibana flaw allowing code execution | The U.S. DoJ charges 12 Chinese…
00:00 – PreShow Banter™ — Lil NAS06:52 – BHIS – Talkin’ Bout [infosec] News 2023-03-0608:13 – Story # 1: LastPass says employee’s home computer was hacked and corporate vault takenhttps://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/28:32 […] The post Talkin’ About Infosec News – 3/8/2023 appeared first on Black Hills Information Security.
On March 4, Carrie Speranza, CEM, president of the United States Council of the International Association of Emergency Managers (IAEM-USA), testified before the House Committee on Homeland Security’s Subcommittee on Emergency Management and Technology, in the hearing entitled “Future of FEMA: Perspectives form the Emergency Management Community.” “To serve our communities effectively, disaster management must be federally supported, state-administered, and locally executed,” stated Speranza. “Together with private industry, this multi-sector approach is a necessary partnership, particularly when disasters overwhelm local and state resources.” Agreeing that reform of federal disaster programs is overdue, Speranza’s testimony highlighted FEMA programs that must be…
AI applications are embedded in our phones and becoming a vital part of life. To accelerate mainstream adoption, technology companies are inundating us with TV commercials to show the magic of AI. “Summarize a research report.” “Make this email sound professional.” Many people don’t realize that as they watch these commercials and experiment with the technology, most of these capabilities are based on language, particularly large language models (LLM). On the consumer side, breakthroughs in natural language processing and improving search engines are great. Andrej Karpathy, Open AI co-founder, referred to this when he said, “The hottest new programming language…