Author: HackWatchit

Patterson Cake // PART 1 PART 2 In part one of “Wrangling the M365 UAL,” we talked about acquiring, parsing, and querying UAL data using PowerShell and SOF-ELK. In part two, we discussed leveraging AWS EC2 for greater flexibility and accessibility for SOF-ELK deployment. Along the way, we learned how to specifically format our exported UAL data for easy, automated ingestion into SOF-ELK, but what if the data you’ve acquired or were provided is not in the proper format? Fortunately, if we have the “AuditData” blob, as part of a CSV export from Purview or PowerShell, we can extract, reformat,…

Do you want to have the best communication system at your workplace? Learn how to maximize the benefits of Slack for business. This guide walks you through setting up your workspace and explores how its features can enhance team collaboration. Setting Up Your Slack Workspace The initial task to solve your company’s communication problems is to create your own Slack workspace. Start with a company-associated email and organize your workspace.  The first step is to select a unique and attractive name, suggest the goal and purpose of your workspace, and then refer to your teammates to invite them to the channel.…

Ransomware gangs exploit a Paragon Partition Manager BioNTdrv.sys driver zero-day Pierluigi Paganini March 01, 2025 Microsoft warns of a Paragon Partition Manager BioNTdrv.sys driver zero-day flaw actively exploited by ransomware gangs in attacks. Microsoft discovered five vulnerabilities in the Paragon Partition Manager BioNTdrv.sys driver. The IT giant reported that one of these flaws is exploited by ransomware groups in zero-day attacks. Paragon Partition Manager, available in Community and Commercial versions, manages hard drive partitions using the BioNTdrv.sys driver. This kernel-level driver enables low-level access with elevated privileges for data management. The researchers discovered five vulnerabilities in Paragon Partition Manager’s BioNTdrv.sys driver, versions before…

With a buzz, your phone lets you know you got a text. You take a peek. It’s from the U.S. Postal Service with a message about your package. Or is it? You might be looking at a smishing scam. “Smishing” takes its form from two terms: SMS messaging and phishing. Effectively, smishing is a phishing attack on your phone. Scammers love these attacks year-round, and particularly so during holiday shopping rushes. The fact remains that we ship plenty of packages plenty often, and scammers use that to their advantage. Smishing attacks try to slip into the other legitimate messages you…

As scam compounds in Southeast Asia continue to drive massive campaigns targeting victims around the world, WIRED took a deeper look at how Elon Musk’s satellite internet service provider Starlink is keeping many of those compounds in Myanmar online. Meanwhile, FTC complaints obtained by WIRED allege that an “OpenAI” job scam used Telegram to recruit workers in Bangladesh for months before the fraudsters suddenly disappeared.WIRED published the inside story of Russian tech executive Vladislav Klyushin, who—at Vladimir Putin’s behest—was part of a notable US-Russia prisoner swap last summer after he was convicted and incarcerated in the US for insider trading…

With security budgets tightening and business leaders taking a more watchful eye toward cybersecurity, security operations leaders are increasingly looking to justify their work with key performance indicators. But the question remains: Which metrics matter most? Earning a seat at the table means talking to business leaders in a language they understand. SecOps leaders must bring objective and relatable measures to the discussion. So let’s dive into the metrics that matter most to our C-suite peers. The value of business-centered metrics It’s no longer optional for security leaders to prove their value—it’s an expectation. As top execs across industries take…

You are training your latest AI model, anxiously watching as the loss steadily decreases when suddenly — boom! Your logs are flooded with NaNs (Not a Number) — your model is irreparably corrupted and you’re left staring at your screen in despair. To make matters worse, the NaNs don’t appear consistently. Sometimes your model trains just fine; other times, it fails inexplicably. Sometimes it will crash immediately, sometimes after many days of training. NaNs in Deep Learning workloads are amongst the most frustrating issues to encounter. And because they often appear sporadically — triggered by a specific combination of model…

News of a major data breach that could affect nearly three billion records comes to light from a somewhat unusual source — a class-action complaint filed in Florida. Even as details come to light, we advise people to act as if this is indeed a large and significant breach. The National Public Data (NPD) breach First, the details. The filed complaint concerns National Public Data (NPD), a company that provides background checks. Per their website, “[NPD obtains] information from various public record databases, court records, state and national databases, and other repositories nationwide.” The complaint alleges that NPD was hit…

The post Talkin’ About Infosec News – 9/11/2023 appeared first on Black Hills Information Security.