Author: HackWatchit

The Chinese state-sponsored Salt Typhoon hacking group uses a custom utility called JumbledPath to stealthily monitor network traffic and potentially capture sensitive data in cyberattacks on U.S. telecommunication providers. Salt Typhoon (aka Earth Estries, GhostEmperor, and UNC2286) is a sophisticated hacking group active since at least 2019, primarily focusing on breaching government entities and telecommunications companies. Recently, the U.S. authorities have confirmed that Salt Typhoon was behind several successful breaches of telecommunication service providers in the U.S., including Verizon, AT&T, Lumen Technologies, and T-Mobile. It was later revealed that Salt Typhoon managed to tap into the private communications of some U.S. government officials and stole information…

NailaoLocker ransomware targets EU healthcare-related entities Pierluigi Paganini February 20, 2025 NailaoLocker ransomware is a new threat that targeted European healthcare organizations from June to October 2024. Orange Cyberdefense CERT uncovered a malware campaign, tracked as The Green Nailao campaign, that targeted European organizations, including healthcare, in late 2024, using ShadowPad, PlugX, and the previously undocumented NailaoLocker ransomware. The Orange Cyberdefense CERT investigated four attackers with a similar initial access vector consisting of the compromise of a Check Point VPN appliance. The experts believe threat actors exploited the zero-day CVE-2024-24919 in Check Point Security Gateways with Remote Access VPN or Mobile Access…

Compliance & Privacy Specialist McKesson | Remote – View job details As a Compliance & Privacy Specialist, you will identify potential gaps, establish and maintain policies and procedures to guide the business in complying with regulatory requirements, create and deliver workforce education on privacy and data protection standards, establish and enhance auditing and monitoring activities along with corresponding metrics, and investigate potential policy and regulatory infractions within the business. Cybersecurity Analyst Messer | On-site – View job details As a Cybersecurity Analyst, you will utilize existing technology platforms to monitor security threats and incidents. Investigate on suspicious activities, gather evidence…

The recent emergence of powerful open-source AI models like DeepSeek has sent many enterprises scrambling to block access per their security policies. While AI teams increasingly turn to open repositories to leverage free and highly capable models like DeepSeek, security teams face mounting pressure to prevent unrestricted downloading of artifacts from untrusted sources. The bottom line is clear: organizations deeply care about trust in their AI Supply Chain. That’s why we’re especially pleased to announce that, beginning immediately, all existing users of Cisco Secure Endpoint and Email Threat Protection are protected against malicious AI Supply Chain artifacts, whether downloaded directly…

Fortinet’s Derek Manky discusses the exponential increase in the speed that attackers weaponize fresh vulnerabilities, where botnets and offensive automation fit in, and the ramifications for security teams.

This is part one of a multipart blog series on researching a new generation of hardware implants and how using solutions from the world of IoT can unleash new capabilities.   Background Back in April 2023, I took a deep dive into the state of cybersecurity in space systems. One of the initial goals of the effort was to learn as much as I could and then build something that others could play with, hands on, to get their first taste of how things in space work. That goal was actualized at Wild West Hacking Fest in October of 2023,…

A WIRED investigation into the inner workings of Google’s advertising ecosystem reveals that a wealth of sensitive information on Americans is being openly served up to some of the world’s largest brands despite the company’s own rules against it. Experts say that when combined with other data, this information could be used to identify and target specific individuals.Display & Video 360 (DV360), one of the dominant marketing platforms offered by the search giant, is offering companies globally the option of targeting devices in the United States based on lists of internet users believed to suffer from chronic illnesses and financial…

Darktrace’s Threat Research team highlighted a significant rise in malware-as-a-service (MaaS) threats, which accounted for 57 percent of detected threats, marking a 17 percent increase from the first half of 2024. The Darktrace 2024 Annual Threat report also notes the growing sophistication of phishing attacks, with spearphishing making up 38% of incidents. Cybercriminals are increasingly focusing on evasion tactics, exploiting edge device vulnerabilities, using living-off-the-land (LOTL) techniques, and hijacking critical business tools like Dropbox and SharePoint. Additionally, attackers are leveraging compromised Software-as-a-Service (SaaS) credentials, underscoring identity management as a costly and persistent challenge for enterprises. The report emphasizes that attackers…

Thinking about deleting your Facebook account? We can show you how. Before we get to that, you might be interested to find what kind of data Facebook collects about you — and how long Facebook keeps your account data, even after you delete it. What does Facebook know about you? For that answer, we turn to Facebook’s privacy policy page.[i] As you might imagine, the list of what they collect is long—long enough that you’ll want to read it for yourself. Yet, broadly, Facebook provides the following summary as part of its June 2024 Privacy Policy. Per Facebook, they collect:…