Author: HackWatchit

Fortinet announced significant enhancements to FortiAnalyzer, reinforcing its role in driving faster, smarter security operations (SecOps)—all from a single, turnkey hybrid platform tailored for mid-sized enterprises and teams impacted by the cyber skills shortage. FortiAnalyzer offers a powerful, streamlined entry point to scale an organization’s security operations center (SOC), providing broad coverage for both on-premises and cloud environments from a single platform. With ready-to-deploy capabilities that deliver complete control with centralized visibility, advanced threat detection, and automated incident response, organizations increase their agility and ability to rapidly expand SecOps coverage and use cases without adding complexity. “Security teams today are…

Authors/Presenters: Michael v3ga Aguilar Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink The post DEF CON 32 – Dysfunctional Unity: The Road To Nowhere appeared first on Security Boulevard.

The first spot exchange-traded fund based on XRP’s ongoing price will soon begin trading—just not in the U.S. The Hashdex Nasdaq XRP Index Fund has launched in a pre-operational phase and will debut on Brazil’s B3 exchange after the country’s financial investments regulator greenlit the ETF on Wednesday. Crypto asset manager Hashdex has not yet specified a start date. The fund’s approval comes as issuers worldwide aim to address surging demand for crypto-focused investments, amid a more favorable regulatory environment for these products and widening acceptance among retail and institutional investors. In recent weeks, multiple firms, including issuing giants Bitwise Asset Management, 21Shares,…

The endpoint security market is at a critical inflection point. While cyberthreats are evolving at an unprecedented pace, accelerated by artificial intelligence and automated attack tools, many traditional endpoint security solutions are struggling to keep up, leaving organizations vulnerable to sophisticated attacks. As we analyze the results from the December 2024 MITRE ATT&CK evaluation, a clear pattern emerges: Palo Alto Networks has established itself as one of the top three endpoint security solutions through years of demonstrated excellence and innovation. The State of Endpoint Security — A Widening Gap As adversaries leverage AI and automated tools to develop increasingly sophisticated…

Start this blog series from the beginning here: PART 1 Misconfigurations in Active Directory Certificate Services (ADCS) can introduce critical vulnerabilities into an Enterprise environment. In this article, we will cover the basics of exploiting escalation techniques ESC2 and ESC3 using Certipy.1 These escalation techniques abuse overly permissive enrollment rights and Extended Key Usage configurations. The Extended Key Usage (EKU) policies define how a certificate can be used. Some examples of the available descriptors for the EKU policy are shown in the following screenshot. EKU Descriptor Examples  Users authorized to request a certificate can be defined on the Certificate Authority…

By 2028, Gartner predicts that more than 50% of businesses will rely on cloud platforms to drive their business efforts (Gartner, 2023). In an era where digital transformation drives business strategies, securing cloud environments has become even more critical. Cloud security involves safeguarding cloud-based data, applications, and infrastructures from security vulnerabilities and threats. At the core of this effort are cloud security architects—the strategists and visionaries responsible for safeguarding the digital backbone of the future: the cloud. In this blog, we will explore the journey to becoming a cloud security architect, including key responsibilities, necessary skills and qualifications, career prospects…

Ethical issues aside, should you be honest when asked how certain you are about some belief? Of course, it depends. In this blog post, you’ll learn on what. A probabilistic quiz game David Spiegelhalter’s new (as of 2025) fantastic book, “The Art of Uncertainty” – a must-read for everyone who deals with probabilities and their communication – features a short section on scoring rules. Spiegelhalter walks the reader through the quadratic scoring rule, and briefly mentions that a linear scoring rule will lead to dishonest behavior. I elaborate on that interesting point in this blog post. Let’s set the stage: Just…

Cary, North Carolina, February 19th, 2025, CyberNewsWire 2025 marks a time of unprecedented volatility in the technology job market. On one hand, dependence on technology is soaring. The growth of AI and machine learning is propelling a surge in new technologies, tactics, and ideas. At the same time, organizations are trying to adapt to the changing dynamic. This has led to more job uncertainty, which the technology sector usually avoids. This year alone, roughly 7,000 jobs have been cut across dozens of tech giants, fueling growing concerns among industry professionals.  As the technology job market weathers this volatility, INE Security,…

The Communications Security Establishment Canada (CSE) and its Canadian Centre for Cyber Security (Cyber Centre) call upon Canadian organizations to stay alert and enhance their defenses against malicious cyber threats as the third anniversary of Russia’s full-scale invasion of Ukraine nears. Over the last three years, the Cyber Centre has observed pro-Russia cyber hackers targeting organizations in countries, including Canada, that have provided support to Ukraine. This activity has included cyber campaigns targeting critical infrastructure and distributed denial-of-service (DDoS) attacks on government and business websites. The Cyber Centre advises operators of Internet-connected operational technology (OT) devices to stay vigilant and…