Author: HackWatchit

New research from Forescout Technologies’ Vedere Labs has recognized that the healthcare sector continues to be a prime target for ransomware attacks. However, the threats facing this sector are not limited to ransomware alone. They also identified a campaign by the China-based APT group, Silver Fox, which exploited vulnerabilities in Philips DICOM viewers to install a backdoor, keylogger, and cryptocurrency miner on victim computers. “While many of those attacks involved ransomware, impacting data availability and potentially disrupting patient care, other threats to healthcare organizations directly exploit medical applications,” Amine Amri, Sai Molige, Daniel dos Santos, and Forescout Research – Vedere…

Why Should Organizations Focus on Independent Audit for Secrets Management? Are you overlooking an essential aspect of your organization’s cybersecurity strategy? This aspect is the management of Non-Human Identities (NHIs) and their secrets, which are often overlooked but vital components of securing your organization’s cloud-based systems. By adopting a comprehensive approach to NHI and secrets management, professionals across sectors—financial services, healthcare, travel, DevOps, and SOC teams—can derive substantial benefits. NHIs, or machine identities, play a key role in cybersecurity. They are created by combining a “Secret”— an encrypted password, token, or key that serves as a unique identifier, much like…

Public Keys is a new weekly roundup from Decrypt that tracks the key publicly traded crypto companies. That term can be quite broad. It includes crypto exchange Coinbase, Michael Saylor’s Bitcoin-amassing Strategy, Jack Dorsey’s crypto payments processor Block, Inc., and the many publicly traded crypto mining companies.This week’s edition focuses on Bitcoin miner Marathon’s big win in Q4 and why it doesn’t seem to be convincing analysts to upgrade their ratings. Also: Crypto exchange Coinbase has finally seen its SEC lawsuit dismissed, miner Hut 8 will report its full-year earnings on Monday, and its competitor Bitfarms got the nod to…

Law enforcement agencies from 19 countries have arrested 25 suspects linked to a criminal ring that was distributing child sexual abuse material (CSAM) generated using artificial intelligence (AI). Operation Cumberland, coordinated by Danish law enforcement and supported by Europol, resulted in the seizure of 173 electronic devices and the identification of 273 suspected members tied to the criminal network. Most individuals arrested during this joint action were apprehended on February 26, 2025, following 33 house searches around the world. In November 2024, authorities arrested the main suspect, a Danish national, for distributing AI-generated content created through an online platform. Those…

Here’s a look at the most interesting products from the past month, featuring releases from: 1Password, Armor, BigID, Dynatrace, Fortinet, Legit Security, Netwrix, Nymi, Palo Alto Networks, Pangea, Privacera, Qualys, SafeBreach, Satori, Seal Security, Socure, and Veeam Software. Qualys TotalAppSec enables organizations to address risks across web applications and APIs Qualys TotalAppSec unifies API security, web application scanning, and web malware detection across on-premises to hybrid and multi-cloud environments, providing companies with a comprehensive view of their application security risk and posture. SafeBreach exposure validation platform identifies security gaps SafeBreach launched SafeBreach exposure validation platform, which combines the power of…

Hayden Covington // Phishing is an ever-present threat, but lately, user education and spam filters have helped mitigate some of that threat. But what happens when a phish makes it further than the user’s mailbox and deeper into your own environment? Can users be expected to have the same level of caution? The event covered in this post is a real event that I discovered while hunting through O365 logs for our SOC customers. For the sake of clarity throughout this blog post, I’m going to refer to Microsoft 365 as O365, since that is how our log fields are…

Deepfakes of Prince William and the UK Prime Minister are pushing investment scams on Facebook and Instagram. Uncovered by Fenimore Harper Communications, a media research organization, the deepfakes take the form of ads that lead to a phony cryptocurrency platform.[i] According to Fenimore Harper, the equivalent of $27,000 U.S. dollars has been spent on these ads and they have reached more than 890,000 people. In all, scammers fueled the ads with 14 different currencies as diverse as Columbian Pesos, Thai Bahm, Uruguayan Peso, Bangladeshi Taka, and United Arab Emirates Dirham. In one of the ads, a fake Prime Minister Sir…

Criminal group UAC-0173 targets the Notary Office of Ukraine Pierluigi Paganini February 27, 2025 CERT-UA warns of UAC-0173 using DCRat malware to target Ukrainian notaries in a new attack wave since mid-January 2025. The Computer Emergency Response Team of Ukraine (CERT-UA) warned of a new campaign by criminal group UAC-0173 targeting Ukrainian notaries with a remote access trojan DCRat (aka DarkCrystal RAT). The campaign started in mid-January 2025, the attack chain starts with phishing messages claiming to be sent on behalf of territorial divisions of the Ministry of Justice of Ukraine. The messages include links pointing to an executable file (for…

The Federal Task Force to Combat Anti-Semitism announced that it will be visiting 10 university campuses that have experienced antisemitic incidents since October 2023. Created pursuant to President Trump’s Executive Order on Additional Measures to Combat Anti-Semitism, the Task Force set as its first priority to eradicate antisemitic harassment in schools and on college campuses. Leading Task Force member and Senior Counsel to the Assistant Attorney General for Civil Rights Leo Terrell informed the 10 universities yesterday that the Task Force was aware of allegations that the schools may have failed to protect Jewish students and faculty members from unlawful…