Author: HackWatchit

The Arizona Senate took a significant step toward modernizing state finance by advancing two crypto reserve bills that could lead to state-managed digital asset funds on Feb. 27.Lawmakers have argued that creating a dedicated crypto reserve prepares Arizona for an inevitable federal regulatory framework and positions the state to harness emerging financial technologies to safeguard public funds amid a volatile economic landscape.Arizona’s crypto billsThe legislature approved the Strategic Digital Assets Reserve bill (SB 1373) on its third reading by a 17–12 vote. Sponsored by Republican Sen. Mark Finchem, the measure would create a Digital Assets Strategic Reserve Fund managed by…

Active Directory Certificate Services (ADCS)1 is used for public key infrastructure in an Active Directory environment. ADCS is widely used in enterprise Active Directory environments for managing certificates for systems, users, applications, and more. In 2021, SpecterOps published a white paper that described ADCS in-depth along with ADCS misconfigurations and vulnerabilities2 that can be abused for credential theft, domain escalation, and persistence. This white paper took a deep dive into attack techniques for ADCS and provided guidance on how to prevent, detect, and respond to such attacks. This blog post will not cover all techniques discussed in the white paper.…

In recent times, we’ve seen a surge of news stories detailing cyberattacks on various companies, ranging from DDoS attacks to data breaches. However, a new report sheds light on a significant breach involving a Chinese hacking group infiltrating the network of Belgium’s Intelligence and Security Agency (VSSE). The attackers exploited a vulnerability in the firewalls and email security software provided by Barracuda Networks. The State Security Service (VSSE) provided some insight into the incident in a statement to Le Soir, where a spokesperson confirmed that a Chinese hacking group (whose name remains undisclosed) had gained unauthorized access to the VSSE’s…

Microsoft exposes Storm-2139, a cybercrime network exploiting Azure AI via LLMjacking. Learn how stolen API keys enabled harmful content generation and Microsoft’s legal action Microsoft has taken legal action against a cybercriminal network, known as Storm-2139, responsible for exploiting vulnerabilities within its Azure AI services. The company publicly identified and condemned four individuals central to this illicit operation. Their names are as follows: Arian Yadegarnia aka “Fiz” of Iran Phát Phùng Tấn aka “Asakuri” of Vietnam Ricky Yuen aka “cg-dot” of Hong Kong, China Alan Krysiak aka “Drago” of the United Kingdom According to Microsoft’s official report, shared exclusively with…

Introduction In a YouTube video titled Deep Dive into LLMs like ChatGPT, former Senior Director of AI at Tesla, Andrej Karpathy discusses the psychology of Large Language Models (LLMs) as emergent cognitive effects of the training pipeline. This article is inspired by his explanation of LLM hallucinations and the information presented in the video. You might have seen model hallucinations. They are the instances where LLMs generate incorrect, misleading, or entirely fabricated information that appears plausible. These hallucinations happen because LLMs do not “know” facts in the way humans do; instead, they predict words based on patterns in their training data. Early models…

Azure Virtual WAN is a robust network service that combines networking, security, and routing functionalities into a single operational interface. This innovative approach simplifies the complexity of managing multiple connectivity types such as VNet, VPN, remote user, and ExpressRoute connectivity. To gain the benefits of Azure Virtual WAN you can begin with 2 VNets —and add others as your networks and business needs evolve. The key takeaway here is that Azure Virtual WAN is a “network-as-a-service” model that uses a familiar hub-and-spoke architecture and leverages the Microsoft global backbone for seamless transit connectivity. Challenges of Hub-and-Spoke Architectures The traditional hub-and-spoke…

Reports filed with the U.S. Federal Trade Commission (FTC) put the risks in perspective — scammers squarely target older adults. In 2023, adults aged 60 and up filed over one-third of all fraud reports. Their reported losses? Close to $2 billion. While scammers target all age groups, older adults offer them a particular advantage. Technology and everyday internet use came along later in their lives. They didn’t grow up with it like the rest of us did, making them less familiar with technology and more susceptible to attack. Moreover, their lifetime savings, home ownership, and retirement accounts make them attractive…

Users of the MITRE Caldera cyber security platform have been urged to plug a critical hole (CVE-2025–27364) that may allow unauthenticated attackers to achieve remote code execution. About MITRE Caldera MITRE Caldera is a platform built on the MITRE ATT&CK framework and is used by cybersecurity teams for adversary emulation, to evaluate detections and defensive tools, train red and blue teamers, testing cyber ranges, and so on. It consists of a core system (including a command-and-control server with a REST API and a web interface) and plugins (agents, collections of TTPs, etc.) to expand its capabilities. Some of the plugins…

9 Oct 2023 Podcasts Brought to you by Antisyphon Training — https://www.antisyphontraining.com Abusing Active Directory Certificate Services – Part One Talkin’ About Infosec News – 10/10/23 Looking For Something?Browse by category Select Category Alyssa Snow  (7) Ashley Knowles  (1) Ashley Van Hoesen  (1) Author  (402) Backdoors & Breaches  (7) Beau Bullock  (32) Ben Bowman  (1) Ben Burkhart  (1) Blue Team  (101) Blue Team Tools  (40) Brian Fehrman  (18) Brian Ireland  (1) Brian King  (20) Bronwen Aker  (1) C2  (29) Cameron Cartier  (2) Carrie Roberts  (5) Chris Traynor  (2) CJ Cox  (8) Connor Costigan  (1) Corey Ham  (3) Craig Vincent  (2) Dale Hobbs  (3) Daniel Pizarro  (1) Darin Roberts  (1) Dave Blandford  (2) David Fletcher  (30) David Perez  (1) Deb Wigley  (1) Debjeet Banerjee  (1) Derek Banks  (13) Derrick Rauch  (1) DFIR  (1) DNSTAP  (1)…