Author: HackWatchit

Recently in the SOC, we were notified by a partner that they had a potential business email compromise, or BEC. We commonly catch these by identifying suspicious email forwarding rules, utilizing anomaly detection services, or by reports from our partners, as we did in this scenario. As always, the earlier we can catch these events in the attack chain, the better. This led us to begin investigating high risk logins identified by Azure AD Identity Protection, or what is now known as Entra Identity Protection.  Entra ID protection categorizes risk levels as low, medium, or high. Entra ID also attaches…

Facebook is the most popular social network worldwide, outperforming every other competitor for reach and active users, according to Statista. Further, according to Sprout Social, Facebook is the third-most visited website following Google and YouTube. Thus, when a phishing campaign leverages the Facebook brand, the implications are particularly consequential. Email researchers at Check Point have recently discovered a new Facebook-focused phishing campaign, which has been sent to more than 12,279 email addresses and targets hundreds of companies. The campaign began around December 20th 2024 and has primarily affected enterprises across the EU (45.5%), US (45.0%) and Australia (9.5%). Nonetheless, versions…

In this Help Net Security interview, Natalia Belaya, CISO at Cloudera, discusses common misconceptions about cloud security, the balance between protection and business agility, and overlooked risks that CISOs should prioritize. Belaya also offers practical strategies for integrating cloud-native security solutions and mitigating misconfigurations at scale. What key security principles should enterprises follow when migrating to the cloud, particularly for hybrid and multi-cloud environments? One of the biggest misconceptions about cloud migrations is assuming that security is built-in by default. Many organizations move to hyperscalers like AWS, Google Cloud, or Azure believing they inherit full or near full security protection…

AuthorsChaitanya S Rao, Arpitha S About UsIBM PTC is a proficient internal Security Test Team responsible for vulnerability assessment and ethical hacking of web, mobile applications and infrastructure. Introduction:As the world becomes increasingly digitized, security has become an increasingly important issue. Businesses and organizations need to look for new and innovative ways to improve security of their products. One promising new approach is the use of language models, such as ChatGPT, in the areas of security. From solving simple math problems to cracking medicine and law exams, from framing sales pitches to analysing and finding vulnerabilities in code, ChatGPT has…

In episode 403 of “Smashing Security” we dive into the mystery of $65 million vanishing from Coinbase users faster than J-Lo slipped into Graham’s DMs, Geoff gives a poor grade for PowerSchool’s security, and Carole takes a curious look at QR codes. All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Lazarus Heist’s Geoff White. Warning: This podcast may contain nuts, adult themes, and rude language. Hosts: Graham Cluley:  @grahamcluley.com  @[email protected] Carole Theriault:  @caroletheriault Guest: Geoff White Episode links: Sponsored by:…

You consider yourself a responsible person when it comes to taking care of your physical possessions. You’ve never left your wallet in a taxi or lost an expensive ring down the drain. You never let your smartphone out of your sight, yet one day you notice it’s acting oddly.   Did you know that your device can fall into cybercriminals’ hands without ever leaving yours? SIM swapping is a method that allows criminals to take control of your smartphone and break into your online accounts.  Don’t worry: there are a few easy steps you can take to safeguard your smartphone from prying eyes and get back to using your devices confidently.  What Is…

Google Chrome has updated the existing “Enhanced protection” feature with AI to offer “real-time” protection against dangerous websites, downloads and extensions.  As spotted by Leo on X, the update has been rolled out to Chrome’s stable channel on all platforms after three months of testing in Canary. Enhanced protection, which is part of the Safe browsing feature, isn’t new and has been around for years, but it’s now being updated to use AI. AI powered Enhanced protection in Chrome stable Previously, Google said Chrome used “proactive protection” to protect users from malicious or suspicious websites, but the terminology has been…

Jordan has been hanging around the tech industry for 25 years now and was baited hook, line, and sinker by Napster. He’s been part of the Black Hills Information Security team for a decade in various capacities and has been a part of Antisyphon Training’s amazing growth trajectory as an instructor. Changes to the msds-KeyCredentialLink attribute are not audited/logged with standard audit configurations. This required serious investigations and a partner firm in infosec provided us the answer: TrustedSec.  So, credit where it is due – this was amazing research: https://trustedsec.com/blog/a-hitch-hackers-guide-to-dacl-based-detections-part-1b. And this should resolve the lack of auditing on the…

Cryptocurrency apps in the U.S. have surged in popularity due to factors such as the potential for profit, low transaction fees, and increasing user accessibility. These platforms allow users to trade cryptocurrencies easily, offering a decentralized, peer-to-peer model that reduces reliance on traditional financial institutions. The ability to buy low and sell high has attracted investors seeking financial gains, while lower fees compared to traditional payment methods make these apps more appealing for online transactions. The increased acceptance of cryptocurrencies by businesses, along with advancements in blockchain technology, security, ease of use, and high liquidity, is fueling the belief that…