Author: HackWatchit

Security experts have warned that a cybercriminal group has been running a malicious and inventive phishing campaign since August 2024 to break into organizations across Europe, North America, Africa, and the Middle East.The Russian group, known as Storm-2372, has targeted government and non-governmental organisations (NGOs), as well as firms working in IT, defence, telecoms, health, and the energy sector.What makes the campaign particularly notable is the way that it attempts to lure unsuspecting victims through the use of device codes from WhatsApp and Microsoft Teams.As explained on the Microsoft Security blog, victims are being duped into handing over authentication codes,…

German cybersecurity company admeritia has developed a new resource with the launch of Cyber Decision Diagrams, a free community tool. Tailored for the industrial sector and critical infrastructure, the tool is designed to streamline and enhance decision-making processes. By democratizing technical knowledge, the tool empowers organizations to break down complex cybersecurity decisions, evaluate alternatives, and visualize outcomes through structured, engineering-grade diagrams. Cyber Decision Diagrams provide a clear, five-step framework to help organizations clarify critical cybersecurity decisions by gaining a sharper understanding of priorities and challenges; grounding decisions in real-world contexts to ensure choices are practical and aligned with operational needs;…

Xerox Versalink printers are vulnerable to pass-back attacks. Rapid7 discovers LDAP & SMB flaws (CVE-2024-12510 & CVE-2024-12511). Update firmware now! Rapid7 researchers uncovered security weaknesses in Xerox Versalink C7025 multifunction printers, specifically models running firmware version 57.69.91 and earlier. These vulnerabilities designated CVE-2024-12510 and CVE-2024-12511, expose the devices to “pass-back” attacks. According to Rapid7’s research shared with Hackread.com, these are a type of attacks that allow a malicious actor who has compromised the printer’s administrative functions to redirect authentication requests to a system under their control. This can be achieved by altering settings related to services like Lightweight Directory Access Protocol…

A large-scale malware campaign dubbed “StaryDobry” has been targeting gamers worldwide with trojanized versions of cracked games such as Garry’s Mod, BeamNG.drive, and Dyson Sphere Program. These titles are top-rated games with hundreds of thousands of ‘overwhelmingly positive’ reviews on Steam, making them good targets for malicious activity. It’s worth noting that a laced Beamng mod was reportedly used as the initial access vector for a hack at Disney in June 2024. According to Kaspersky, the StaryDobry campaign started in late December 2024 and ended on January 27, 2025. It mostly impacted users from Germany, Russia, Brazil, Belarus, and Kazakhstan. The threat…

Check Point today unveiled its strategic vision for securing the hyper-connected world at CPX 2025 Bangkok, its premier annual cyber security event. With nearly 1,650 employees, customers and partners from across APAC in attendance, Check Point showcased how AI-driven security innovations and its hybrid mesh security strategy are transforming cyber defense, ensuring organizations stay ahead of evolving threats.  With the global surge in sophisticated cyber attacks fueled by ransomware, hacktivism, and AI-driven cyber crime, organizations in APAC faced an average of 2,915 attacks per week over the last six months—significantly higher than the global average of 1,843 attacks per week,…

Topic: Securing Your Network: The Basics Every Network Administrator Should KnowWatch NowAbstract: In the current threat landscape, securing the digital network of an organization is of utmost importance. The role of any network and system administrator is to ensure the seamless functioning and security of systems and devices within their network. This webinar highlights the key concepts of network security that are mandatory for every network administrator to know in order to ensure the ceaseless and secure operations of devices in their network. It covers foundational aspects of network security architecture, such as firewall configurations, segmentation strategies, secure remote access, and…

Carrie Roberts is an Antisyphon instructor and experienced cyber security professional who has mentored many on their journey into cyber. My name is Carrie Roberts and I love my job in cyber security because there is so much to be learned and so many ways to contribute in positive and imaginative ways. Not to mention, the pay is great, the skillset is in high demand, and there are flexible work arrangements and schedules. I encourage everyone to consider cyber security as a career, and I am always looking for ways to help them do it. That is why I have…

Edge Delta announced its Security Data Pipelines. This solution empowers security teams to process, analyze, and act on security data faster and more efficiently than ever before. By enabling real-time data processing and enrichment, Edge Delta’s Security Data Pipelines transform how organizations detect, respond to, and mitigate security threats across complex environments. The Security Data Pipelines provide a foundational, scalable framework for standardizing, enriching, and streaming security data from a wide array of data sources — including network logs, endpoint data, and cloud environments — to any downstream destination. By delivering everything from raw data to enrichments to insights in…

As Black Friday approaches, eager bargain hunters are gearing up to snag the best deals online. But with the excitement of holiday shopping also comes the risk of cyber threats, as cybercriminals see this busy time as an opportunity to exploit unsuspecting shoppers. Here’s what you need to know to protect yourself from potential risks while scoring your favorite holiday deals.  The Growing Threat: Cybercrime During Black Friday  Authorities are already sounding the alarm about the risks associated with online shopping during the festive season. Cybersecurity agencies, including the UK’s National Cyber Security Centre (NCSC) and the Canadian Royal Canadian…