Author: HackWatchit

Traveling on a budget while backpacking allows individuals to immerse themselves fully in local cultures, explore off-the-beaten-path destinations, and forge genuine connections with fellow travelers, all while minimizing expenses. However, amidst the thrill of exploring new places, it’s crucial to safeguard your digital assets and personal information. Experiencing multiple scams on a single trip, as this twenty-one-year-old woman did in Chile and Bolivia, is rare. However, her cautionary tale highlights the importance of careful preparation when traveling, particularly in unfamiliar destinations. Common types of travel scams Being informed about different scam risks is critical to ensuring a safe journey. Beyond…

Veriti Research reveals 40% of networks allow ‘any/any’ cloud access, exposing critical vulnerabilities. Learn how malware like XWorm and Sliver C2 exploit cloud misconfigurations. Recent research conducted by Veriti shared with Hackread.com, sheds light on the alarming trend of cybercriminals exploiting cloud infrastructure for malicious purposes. The study reveals that cloud platforms are increasingly being used not only to host and deliver malware payloads but also to serve as command-and-control centres.   A particularly concerning finding is that over 40% of networks permit unrestricted communication with at least one major cloud provider. This “any/any” configuration creates a significant security vulnerability, allowing…

The European Union Agency for Cybersecurity (ENISA) published on Wednesday its initial NIS360 report, which identifies areas for improvement and tracking of progress across NIS2 Directive sectors. The NIS360 assesses the maturity and criticality of NIS2 sectors, providing both a comparative and a more in-depth analysis. It provides a cross-sectoral overview and a detailed sector-by-sector analysis of the criticality and maturity of assessed sectors.  Building on the insights gathered, the NIS360 document highlights the strengths of and challenges faced by each sector assessed, identifies discrepancies in maturity perceptions, and provides a clear view of the impact of cybersecurity policy implementation…

This Fourth of July brought fireworks in the form of a digital security breach, one that has been recorded as the most significant password leak in history. Dubbed RockYou2024, this colossal data dump was unveiled by a user named “ObamaCare” on a prominent hacking forum, revealing a staggering 9.9 billion unique passwords in plain text. The Scale of RockYou2024 The sheer volume of compromised passwords is enough to make any security enthusiast’s head spin. RockYou2024 isn’t just a leak; it’s a behemoth collection of 9,948,575,739 passwords that could potentially affect millions of users worldwide. This event marks a critical point…

The post Talkin’ About Infosec News – 5/11/2023 appeared first on Black Hills Information Security.

In recent years, collaboration tools have become an absolute necessity for remote and hybrid work. This primarily increased during the COVID-19 pandemic due to the impossibility of communicating in person. So, tools like Slack, Microsoft Teams, and Zoom surged in popularity, enabling employees to stay connected despite physical distances. But this sudden transition to online communication opened up many questions related to security because the vast majority of employees were accessing sensitive information from home networks, opening the door to potential data leaks. Common causes of data leakage in collaboration tools Data leaks in collaboration tools can occur for a…

Two rules announced by the Consumer Financial Protection Bureau (CFPB) during the Biden administration suffered setbacks in Congress on Wednesday (March 5). The Senate voted Wednesday to approve a joint resolution (S.J. Res. 28) disapproving of the “Defining Larger Participants of a Market for General-Use Digital Consumer Payment Applications” rule submitted by the CFPB. The resolution was passed on a 51 to 47 vote, according to the Senate website. The resolution still requires House approval, The Verge reported Wednesday. If approved, it would ensure that the rule would have no force or effect, according to the text of the joint…

When it comes to passwords, most of us would love nothing more than to set it and forget it. But that’s exactly what hackers are hoping for — in fact, it makes their job a lot easier. This means the best line of defense is frequent password changes.    But how often should you create new passwords? Cybersecurity experts recommend changing your password every three months. There may even be situations where you should change your password immediately, especially if a cybercriminal has access to your account.    This article explores those exact situations and covers some of the best password practices you can use to help safeguard these important…

rvrsh3ll //  Introduction  This blog post is intended to give a light overview of device codes, access tokens, and refresh tokens. Here, I focus on the technical how-to for standing up and operating a Dynamic Device Code phishing campaign. I’ll cover some key points during the attack flow so operators and defenders will better understand areas to key-in on to help avoid or detect, depending on your intent.  Codes   To better understand what a “device code” is, take into consideration when purchasing a new smart television. That television may come with apps installed such as Netflix or Hulu. Well, in…