Author: HackWatchit

Farewell, summer. Hello, back-to-school season! While the chill may not be in the air yet, parents may be feeling the slight shiver of unease as their kids, tweens, teens, and young adults return to school and become re-entangled with the technology they use for their education and budding social lives.  Before they hop on the bus or zoom off to college, alert your children to the following 10 online cybersecurity best practices to ensure a safe school year online.  1. Keep Track of Mobile Devices It sounds obvious but impart the importance to your kids of keeping their eyes on…

Microsoft disrupted a global cybercrime ring abusing Azure OpenAI Service Pierluigi Paganini March 01, 2025 Microsoft exposed four individuals behind an Azure Abuse scheme using unauthorized GenAI access to create harmful content. Microsoft shared the names of four developers of malicious tools designed to bypass the guardrails of generative AI services, including Microsoft’s Azure OpenAI Service. Microsoft is taking legal action against these defendants, dismantling their operation, and curbing misuse of its AI technology. The four individuals are Arian Yadegarnia aka “Fiz” of Iran, Alan Krysiak aka “Drago” of United Kingdom, Ricky Yuen aka “cg-dot” of Hong Kong, China, and…

29 Aug 2023 Podcasts Brought to you by Antisyphon Training — https://www.antisyphontraining.com Talkin’ About Infosec News – 8/21/2023 Wrangling the M365 UAL with SOF-ELK and CSV Data (Part 3 of 3) Looking For Something?Browse by category Select Category Alyssa Snow  (7) Ashley Knowles  (1) Ashley Van Hoesen  (1) Author  (402) Backdoors & Breaches  (7) Beau Bullock  (32) Ben Bowman  (1) Ben Burkhart  (1) Blue Team  (101) Blue Team Tools  (40) Brian Fehrman  (18) Brian Ireland  (1) Brian King  (20) Bronwen Aker  (1) C2  (29) Cameron Cartier  (2) Carrie Roberts  (5) Chris Traynor  (2) CJ Cox  (8) Connor Costigan  (1) Corey Ham  (3) Craig Vincent  (2) Dale Hobbs  (3) Daniel Pizarro  (1) Darin Roberts  (1) Dave Blandford  (2) David Fletcher  (30) David Perez  (1) Deb Wigley  (1) Debjeet Banerjee  (1) Derek…

Is Your Cybersecurity Spending Justified? With digital becoming more complex, organizations are continually urged to increase their cybersecurity spending. But the crucial question that arises is – “Is your investment in cybersecurity technology delivering an appropriate return on investment (ROI)?” Understanding the Value of Cybersecurity Investment Cybersecurity is a complex yet crucial aspect of the technological investment that organizations make. The ever-increasing range and sophistication of cyber threats make it requiring constant vigilance. But, the focus shouldn’t just be on the amount spent but also on how effectively that investment is managed. 65% of CFOs are under pressure to yield…

Agentic AI, which consists of systems that autonomously take action based on high-level goals, is becoming integral to enterprise security, threat intelligence, and automation. While these systems present significant potential, they also introduce new risks that CISOs must address. This article examines the key security threats associated with Agentic AI and outlines strategies for mitigation. CISOs must act now by implementing adversarial testing, governance frameworks, multi-layered authentication, and AI security posture management to prevent the weaponization of Agentic AI against their organizations. Deceptive and manipulative AI behaviors A recent study revealed that advanced AI models sometimes resort to deception when…

The following is a guest post from Jill Ford, Founder of Bitford Digital.The ongoing turbulence in global trade policies has sent shockwaves through multiple industries, and Bitcoin mining is no exception. Many in the crypto mining sector are now grappling with the impact of these tariffs as they come into sharper focus.  Some are already dealing with sudden customs delays, cost increases and shortages all while trying to make sense of evolving international trade agreements. With shipments of mining equipment already stuck at borders, uncertainty is growing among miners, suppliers, and investors.Tariffs and Customs Delays: A Growing ConcernOne of the primary concerns…

For millions of people, it’s not a workday without it — video conferencing. And plenty of business gets done that way, which has made conferencing a target for hackers. That then begs the important question, how secure is video conferencing? The answer is pretty secure if you’re using a reputable service. Yet you can take further steps to keep hackers and party crashers out of your meetings. Why would someone want to crash your meeting?  Hackers and party crashers are likely motivated by one of two things: financial gain or mischief. Given that some meetings involve confidential or sensitive info, someone might…

Microsoft had discovered five Paragon Partition Manager BioNTdrv.sys driver flaws, with one used by ransomware gangs in zero-day attacks to gain SYSTEM privileges in Windows. The vulnerable drivers were exploited in ‘Bring Your Own Vulnerable Driver’ (BYOVD) attacks where threat actors drop the kernel driver on a targeted system to elevate privileges. “An attacker with local access to a device can exploit these vulnerabilities to escalate privileges or cause a denial-of-service (DoS) scenario on the victim’s machine,” explains a warning from CERT/CC. “Additionally, as the attack involves a Microsoft-signed Driver, an attacker can leverage a Bring Your Own Vulnerable Driver (BYOVD) technique to exploit systems even if…

CalypsoAI launched the CalypsoAI Security Leaderboard, an index of all the major AI models based on their security performance. The CalypsoAI Security Leaderboard ranks all the major models on their ability to withstand advanced security attacks and presents a risk-to-performance (RTP) ratio as well as a valuable cost of security (CoS) metric. CalypsoAI compiled the Leaderboard after stress-testing AI models with its new Inference Red-Team solution, which combines Agentic Warfare with automated attacks. “Our Inference Red-Team product has successfully broken all the world-class GenAI models that exist today,” said Donnchadh Casey, CEO of CalypsoAI. “Many organizations are adopting AI without understanding…