Author: HackWatchit

Push notifications are a common feature that many websites use to keep users engaged. However, what happens when these notifications turn malicious? Renée Burton, Vice President of Threat Intel at Infoblox, recently shared her firsthand experience with this alarming trend. Here’s a look at how scammers exploit push notifications to deliver scams, including fake gift cards and sweepstakes. The Push Notification Trap Renée found that when users visit a website that requests permission to send notifications, they may unknowingly grant scammers a powerful tool. Cybercriminals take advantage of this by tricking users into accepting notifications, often without fully understanding the…

If you’re located in a country that forms part of the 5, 9, or 14 Eyes alliance, you risk your online activities being monitored, logged, and shared with other member countries. The intelligence-sharing alliances collect data from various sources, including browsing activity, emails, or telephone calls. Collecting and then sharing this intelligence with other members allows governments to bypass their national privacy laws. Needless to say, this is all more than a little concerning if you value your privacy. For this reason, we’ll look closer at the countries involved, the data they collect, the risks posed, and how to protect…

Cybercriminals are sending bogus copyright claims to YouTubers to coerce them into promoting malware and cryptocurrency miners on their videos. The threat actors take advantage of the popularity of Windows Packet Divert (WPD) tools that are increasingly used in Russia as they help users bypass internet censorship and government-imposed restrictions on websites and online services. YouTube creators catering to this audience publish tutorials on how to use various WPD-based tools to bypass censorship and are being targeted by threat actors posing as the copyright holders of these tools. In most cases seen by Kaspersky, the threat actors claim to be the…

The CrowdStrike 2025 Global Threat Report highlights the ongoing threat of identity-based attacks. Adversaries are increasingly exploiting stolen credentials to evade detection, and 79% of detections overall were classified as malware-free. Valid account abuse became the primary initial access method in 35% of cloud intrusions.  The report also shares that access broker advertisements rose by 50% year-over-year, indicating a rise in demand for valid credentials and other forms of access. With the average eCrime breakout time dropping to just 48 minutes, organizations are under constant pressure to detect and stop identity-based threats before they escalate. Organizations require identity protection that…

Are We Overlooking Non-Human Identities in Our Cybersecurity Strategy? How often do we give due consideration to the Non-Human Identities (NHIs)? The role of NHIs and their ‘secrets’ management in creating a robust and secure IT infrastructure is often underestimated. NHIs, primarily machine identities, form the backbone of secure transactions. They are, in a way, the unsung heroes assisting in the smooth functioning of various industries, including healthcare, finance, travel, and even DevOps and SOC teams. Understanding NHIs and Secrets Management Non-Human Identities are essentially machine identities employed in cybersecurity measures. These identities are paired with a ‘Secret’, which could…

Realized volatility measures how much an asset’s price fluctuated over a past period and is typically calculated by taking the standard deviation of daily (often log) returns and annualizing it. It differs from implied volatility, which reflects market expectations for future price swings. Realized volatility is crucial because it captures actual market risk and helps investors gauge whether price movements align with their risk tolerance. It also reveals when markets are stressed, as large price swings drive up volatility. Since the beginning of March, Bitcoin has seen a turbulent market characterized by rapid price swings. Coming off a severe late-February…

Derek Banks // Living Off the Land Binaries, Scripts, and Libraries, known as LOLBins or LOLBAS, are legitimate components of an operating system that threat actors can use to achieve their goals during a campaign against your organization. They do this to try to avoid detection from endpoint protection products and as an alternative to writing custom malicious code.  Credit (original art): Locust Years In many cases these binaries are well known, the techniques documented, and (hopefully) the malicious use is detectable by security products or threat hunting processes. However, in a recent incident response engagement, we found a LOLBAS technique…

I’ve always been fascinated by Fashion—collecting unique pieces and trying to blend them in my own way. But let’s just say my closet was more of a work-in-progress avalanche than a curated wonderland. Every time I tried to add something new, I risked toppling my carefully balanced piles. Why this matters:If you’ve ever felt overwhelmed by a closet that seems to grow on its own, you’re not alone. For those interested in style, I’ll show you how I turned that chaos into outfits I actually love. And if you’re here for the AI side, you’ll see how a multi-step GPT…

Claroty, a cyber-physical systems (CPS) protection company, has announced a partnership with SealingTech, a Parsons Corporation subsidiary renowned for delivering advanced edge computing hardware and cybersecurity solutions to safeguard both federal government and private sector entities. The collaboration equips Cyber Protection Teams (CPTs) with the essential tools, expertise, and support needed to tackle the unique challenges of securing operational technology (OT) and CPS networks, even in the most demanding field environments.  Together, Claroty and SealingTech are delivering a comprehensive federal cyber protection solution designed to enhance the resilience of critical infrastructure. Through an integrated approach that bridges IT and OT,…