Author: HackWatchit
Researchers from Microsoft have detected cyberattacks being launched by a group, called Storm-2372, which it assesses with medium confidence aligns with Russia’s interests and tradecraft. The attacks appear to have been ongoing since August last year and primarily targeted governments, NGOs, information technology (IT) services and technology, defense, telecommunications, health, higher education, and energy/oil and gas in Europe, North America, Africa, and the Middle East. The researchers have observed Storm-2372 shifting to using the specific client ID for Microsoft Authentication Broker in the device code sign-in flow. “Using this client ID enables Storm-2372 to receive a refresh token that can…
Cryptocurrency offers exciting opportunities—but it’s also a favorite playground for scammers. With the rapid rise of deepfake technology and deceptive AI-driven schemes, even seasoned investors can fall victim to fraud. According to McAfee’s State of the Scamiverse report, deepfake scams are on the rise, with the average American now encountering 2.6 deepfake videos daily. And younger adults (18-24) see even more – about 3.5 per day. From fake investment opportunities to phishing attempts, bad actors are more sophisticated than ever. The recent wave of Trump-themed meme coins—more than 700 copycats attempting to mimic the real thing—highlights just how rampant crypto…
Cybersecurity professionals may be concerned about the constantly shifting threat landscape. From the increased use of artificial intelligence (AI) by malicious actors to the expanding attack surface, cybersecurity risks evolve, and defenders need to mitigate them. Despite a period of cybersecurity budget growth between 2021 and 2022, this growth has slowed in the last few years, meaning that cybersecurity leaders need to carefully consider how their purchases improve their current security and compliance posture. To optimize the organization’s cybersecurity budget in 2025, leadership needs to consider the current landscape and what initiatives help them appropriately mitigate risk. AI may be…
Lawmakers and other officials are raising concerns that President Donald Trump’s efforts to cut the federal workforce are kneecapping recent initiatives to recruit more cyber and technology personnel into government. In a Feb. 5 letter to acting Office of Personnel Management Director Charlez Ezell, Democrats on the House Homeland Security Committee wrote that “reckless attacks on federal workers risk reversing recent progress in addressing the federal government’s cyber workforce shortage.” OPM’s recent 90-day hiring freeze includes broad exemptions for national security positions, but the lawmakers say it’s unclear whether that includes cybersecurity jobs. While all civilian Defense Department positions are…
Check Point has announced its plans to establish its first Asia-Pacific Research and Development (R&D) Centre in Bengaluru, India, with a goal to drive innovation in cyber security solutions and strengthen global product development and talent growth. This strategic expansion, unveiled during Check Point’s annual CPX Bangkok 2025 conference, underscores the company’s commitment to advancing cyber security innovation while leveraging India’s dynamic tech talent ecosystem. “India is a global technology powerhouse, and our new R&D Centre in Bengaluru reflects our deep commitment to harnessing top-tier cyber security talent from the region,” said Ruma Balasubramanian, President of APAC & Japan, Check…
by Martin Pearson || Guest Author This article was originally published in the second edition of the InfoSec Survival Guide. Find it free online HERE or order your $1 physical copy on the Spearphish General Store. A home lab will not only enhance your learning opportunities, but can also give you a safe place to play by using virtual machine to emulate a computer, giving you the ability to easily make mistakes with no fear of harm to your personal setup. Practicing on entry-level product is a great way to get started. Think about what you want to learn and…
China-linked APT group Winnti targets Japanese organizations since March 2024 Pierluigi Paganini February 18, 2025 China-linked threat actor Winnti targeted Japanese companies in the manufacturing, materials, and energy sectors in March 2024 as part of a campaign dubbed RevivalStone. Researchers from cybersecurity firm LAC uncovered a new cyberespionage campaign, tracked as RevivalStone, carried out by the China-linked APT group Winnti in March 2024. Threat actors targeted Japanese companies in the manufacturing, materials, and energy sectors and used an enhanced version of “Winnti malware.” The APT group was first spotted by Kaspersky in 2013, but according to the researchers, the gang has been…
Unit21 launched its new scams solution that helps financial institutions and fintechs detect and stop scams before they cause financial harm. Using AI automation, the new solution can be integrated into a fraud team’s workflow to accelerate investigations and response times while also incorporating IP insights and consortium signals to prevent and detect scams before they hit consumer financial accounts. Advancements in technology have allowed criminals to scam consumers and businesses at unprecedented speed and scale. Data from the Federal Trade Commission (FTC) show that consumers reported losing more than $10 billion to fraud in the U.S. in 2023, the…
So, what does your phone know about you? Taken all together it knows plenty — sometimes in ways that feel like your phone is watching you. It all comes down to the data that courses through your phone and your apps, along with a phone’s built-in tracking capabilities. Indeed, your phone certainly knows plenty about you. And companies keep tabs on that. Here’s how… The apps on our phones entertain us, inform us, and help us shop. Many of them also track our activities and location — and then sell or share that info with third parties. From there, that…