Author: HackWatchit

The cyber security skills shortage has been a growing concern for more than a decade. And as the threat landscape continues to grow in complexity, too many organizations have been left vulnerable to the threat of breach. Recognizing the need to narrow this skills gap, Check Point has been working diligently on solutions for the market and we’re excited to announce that Infinity Global Services has combined cutting-edge AI-driven automation with expert-led security services. This innovative approach to training is helping businesses scale their cyber security operations without the need for scarce in-house talent. “The cyber security skills shortage is…

In its recent Wave, Forrester said ReliaQuest “sees where security operations needs to go next and is ahead of others in the market with a strong strategy.” MDR providers have long played a role in SecOps, but the market has shifted as customers demand more proactive solutions. Today, it’s no longer enough to simply detect and investigate threats—SecOps providers must differentiate by advancing detection engineering, leveraging generative AI, and influencing their customers’ overall security posture. At ReliaQuest, we’ve always believed in going beyond the basics of alert handling. Our philosophy, “Make Security Possible,” drives everything we do. We help our…

Ben Bowman is a Security Analyst at Black Hills Information Security. He graduated in 2024 with a degree in cyber operations. Ben conducts research as well as tool development outside of testing. In the world of cybersecurity, it’s important to understand what attack surfaces exist. The best way to understand something is by first doing it. Whether you’re an aspiring penetration tester, a seasoned security researcher, or someone looking to improve your knowledge of wireless networks, the ability to ethically practice Wi-Fi security skills is crucial. But what if you don’t have the necessary hardware or setup to perform these…

​The Belgian federal prosecutor’s office is investigating whether Chinese hackers were behind a breach of the country’s State Security Service (VSSE). Chinese state-backed attackers reportedly gained access to VSSE’s external email server between 2021 and May 2023, siphoning around 10% of all emails sent and received by the agency’s staff. The compromised server was only used for exchanging emails with public prosecutors, government ministries, law enforcement, and other public Belgian administration bodies, as Belgian news outlet Le Soir reported on Wednesday. According to The Brussels Times, the hacked server also routed internal HR exchanges among Belgian intelligence personnel, raising concerns about…

Imagine you’re a network engineer at an enterprise. You already have your hands full with IT priorities, including managing bandwidth related to working from home, the company’s new data center, and, more recently, computing needs to support AI adoption. Additionally, the security team has a long list of device vulnerabilities and an audit they need your help to pass by a specific deadline. So, you spend your nights and weekends managing backups and trying to keep up with configuration changes and upgrades one device at a time. Then, your company completes an acquisition, and your workload doubles as you try…

Affirm has launched a partnership with online personal styling service Stitch Fix. The buy now, pay later (BNPL) provider announced the collaboration Thursday (Feb. 27), noting that it comes as consumers increasingly use its service to buy from fashion brands. “In October through December, fashion sales through Affirm were up 20% year-over-year, demonstrating a shift toward smarter, more responsible ways to pay for clothing and accessories,” Pat Suh, Affirm’s senior vice president of revenue, said in a news release. “To meet this increased consumer demand, we’re growing our network to include even more fashion merchants.” According to the release, Stitch…

Authored by SangRyol Ryu Recently, McAfee’s Mobile Research Team uncovered a new type of mobile malware that targets mnemonic keys by scanning for images on your device that might contain them. A mnemonic key is essentially a 12-word phrase that helps you recover your cryptocurrency wallets. It’s much simpler to remember than the typical complex “private key” it stands for. This Android malware cleverly disguises itself as various trustworthy apps, ranging from banking and government services to TV streaming and utilities. However, once installed, these fake apps secretly gather and send your text messages, contacts, and all stored images to…

Claroty‘s research arm, Team82, has released new findings that uncover security risks in the Windows CE operating system, which is widely used in industrial and embedded systems such as HMI (Human Machine Interface) panels, vending machines, and vehicle infotainment systems. Given Windows CE’s presence in critical industrial environments, Team82 conducted an in-depth analysis of its architecture and discovered vulnerabilities that could allow attackers to exploit devices running on this legacy OS. In the first of a four-part series of research blogs that will examine the Windows CE operating system, Team82 researchers provide a deep dive into Windows CE’s role in…

Executive Summary Cisco has long provided security services for third party events such as the Black Hat and RSA Conferences, as well as the Super Bowl and the Olympic games. These services come in the form of products (Cisco Security Cloud capabilities, including Umbrella, XDR, Malware Analytics, etc. plus Splunk Enterprise Security); and skilled Security Operations Centre (SOC) analysts, who build and operate the infrastructure and hunt for threats, from both inside and outside the event networks. For the second time at Cisco Live APJC, the team was tapped to support the Cisco Live Melbourne 2024 conference. This report serves…