Author: HackWatchit

Cofense uncovers new LinkedIn phishing scam delivering ConnectWise RAT. Learn how attackers bypass security with fake InMail emails and how to protect against this sophisticated phishing tactic. Cybersecurity researchers at Cofense have recently uncovered a deceptive campaign that distributes malicious software using a spoofed LinkedIn email. This operation, detected by their Phishing Defense Center and Intelligence teams, diverges from typical LinkedIn-themed phishing attacks, which usually aim to steal user credentials or facilitate business email compromise. Instead, this campaign delivers a remote access trojan called ConnectWise RAT. The fraudulent email is designed to mimic a notification for a LinkedIn InMail message,…

Approov and Carnegie Mellon University Africa’s Upanzi Network have teamed up again to help fintech companies provide more secure services to their customers by creating a new web-based open source tool which scans Android mobile application software for vulnerabilities and security issues and present a detailed report with recommendations on how to fix any issues found. The new tool, APKIT, is available here.  Long and Fruitful Collaboration  Approov started working with Carnegie Mellon University Africa in the spring of 2023 and since then has continued the relationship, providing mentorship and support to the CMU Africa team. There is tremendous potential…

Topic: AI and ML in Digital Forensics: The Future of Forensic Investigations Watch Now Abstract: As digital and threat landscapes grow increasingly complex, the need for advanced tools to analyze and investigate cyber incidents becomes paramount. Artificial Intelligence (AI) and Machine Learning (ML) are revolutionizing digital forensics by enabling faster, more accurate, and efficient investigations. This webinar will explore the transformative role of AI and ML in digital forensics. It will focus on how AI and ML automate evidence collection, detect sophisticated cyberattacks, and accelerate large-scale breach investigations, significantly enhancing the capabilities of forensic investigators. Furthermore, the session will shed light…

Omega Systems has expanded its cybersecurity offerings with the addition of a new Enterprise Password Management solution to help companies minimize the risk of password-related cyberattacks. Omega’s fully managed password solution is the latest addition to the company’s managed security service portfolio, which is designed to help businesses counter dangerous threat landscape. “Businesses are facing security threats at every turn, but credential theft remains one of the most dangerous and prolific attack vectors for hackers today,” said Ben Tercha, Chief Operating Officer at Omega Systems. “Corporate passwords saved in public domains or tied to personal accounts present an enormous risk…

Summer is synonymous with vacations, a time when families pack their bags, grab their sunscreen, and embark on exciting adventures. In the digital age, smartphones have become an indispensable part of our lives, serving as cameras, maps, entertainment hubs, and communication tools. While these devices enhance our travel experiences, they also become prime targets for theft or damage while we’re away from home. From keeping us connected with family and friends, assisting in navigation, capturing moments, to even helping us with language translation – it is a device of many conveniences. However, when you bring your smartphone while vacationing, like…

Tom Smith // At Black Hills Information Security (BHIS), we deal with all manner of clients, public and private. Until a month or two ago, though, we’d never dealt with a car dealership. But in the past few weeks, we’ve spoken to several dealerships. What’s up?  Turns out that the US Federal Trade Commission (FTC) has ruled that auto dealers are now subject to the Gramm-Leach-Bliley Safeguard Rule. As of June 9, 2023, the rule applies to car dealers. The purpose of the Rule is to require financial institutions to take steps to ensure the security of consumer data they…

Darktrace, a vendor of AI for cybersecurity solutions, unveiled its 2025 State of AI Cybersecurity report. The findings reveal that 78 percent of Chief Information Security Officers (CISOs) surveyed say that AI-powered threats are having a significant impact on their organizations, a 5 percent increase from 2024. While an increasing number of CISOs report feeling a significant impact from AI threats, more than 60 percent now say that they are adequately prepared to defend against these threats, an increase of nearly 15 percent year-over-year. However, insufficient AI knowledge and skills and a shortage of personnel and talent continue to be…

President Donald Trump’s surprise announcement about a strategic crypto reserve triggered an aggressive wave of volatility in the market. Bitcoin’s abrupt spikes and drops in the past several days had a pronounced effect on the futures market, driving trading volumes, shifts in open interests, and large-scale liquidations. Bitcoin’s perpetual futures (perps) overwhelmingly dominated trading activity compared to quarterly delivery futures. On the day of the announcement, perpetual swap volumes were one to two orders of magnitude higher than volumes for any fixed-expiry futures. For instance, Binance’s BTC perpetual contract alone traded on the order of roughly $42 billion in 24-hour…

Google fixed two actively exploited Android flaws Pierluigi Paganini March 04, 2025 Android March 2025 security update addresses over 40 vulnerabilities, including two flaws actively exploited in attacks in the wild. Android March 2025 security update addressed over 40 vulnerabilities, including two flaws, respectively tracked as CVE-2024-43093 and CVE-2024-50302, which are actively exploited in attacks in the wild. “There are indications that the following may be under limited, targeted exploitation. CVE-2024-50302 CVE-2024-43093″ reads the advisory published by Google. CVE-2024-43093 (CVSS score of 7.8) is a Privilege Escalation Vulnerability in Android Framework. A flaw in ExternalStorageProvider.java allows bypassing a file path…