Author: HackWatchit

The payment card giant MasterCard just fixed a glaring error in its domain name server settings that could have allowed anyone to intercept or divert Internet traffic for the company by registering an unused domain name. The misconfiguration persisted for nearly five years until a security researcher spent $300 to register the domain and prevent it from being grabbed by cybercriminals. A DNS lookup on the domain az.mastercard.com on Jan. 14, 2025 shows the mistyped domain name a22-65.akam.ne. From June 30, 2020 until January 14, 2025, one of the core Internet servers that MasterCard uses to direct traffic for portions…

The following article is an op-ed by Debra Nita, Associate Director, Head of Growth at YAP Global.The next crypto breakthrough won’t come from a whitepaper or promises to “revolutionize finance.” It will emerge from something simpler, more human. Like NFTs, gaming and decentralized finance (DeFi) took off in retail popularity in 2021-22, the current bull market is waiting for new killer apps to emerge.Despite being seen as frivolous, memecoins are a prime example of a killer crypto app, and they reveal a blueprint ignored by “serious” crypto initiatives. This was evident in recently popular tokens like $TRUMP and $MELANIA. A…

How do you recognize phishing emails and texts? Even as many of the scammers behind them have sophisticated their attacks, you can still pick out telltale signs. Common to them all, every phishing is a cybercrime that aims to steal your sensitive info. Personal info. Financial info. Other attacks go right for your wallet by selling bogus goods or pushing phony charities. You’ll find scammers posing as major corporations, friends, business associates, and more. They might try to trick you into providing info like website logins, credit and debit card numbers, and even precious personal info like your Social Security…

This webcast was originally published on September 12, 2024.   In this video, Kirsten Gross and James Marrs discuss how logging strategies can affect cyber investigations, specifically focusing on Windows logs. They explore three different logging configurations for a Windows host and examine how these configurations impact the detection of various attacks. The video also introduces a tool called Audit Inspector, which helps manage logging strategies and ensures consistent deployment across an organization. The webinar focuses on logging strategies for Windows hosts and their impact on cyber investigations. Three different logging configurations are examined: default logging, BHIS Sysmon Config, and advanced…

OT cybersecurity solutions company OTORIO introduced on Thursday the CSAV (Compensating Scoring for Asset Vulnerability) framework, a methodology designed to quantify cybersecurity risks for operational technology (OT) assets that lack published CVEs. Yair Attar, co-founder and CTO of OTORIO, introduced the CSAV framework at the ongoing S4x25 conference during his session, ‘Quantifying Risk for Devices Without Published Vulnerabilities.’ Cybersecurity teams often equate the absence of published vulnerabilities with secure operations, but that assumption is dangerously outdated.  ● Many OT devices lack documented vulnerabilities yet remain highly exposed to cyber threats.  ● Over the past eight years, 66% of vendors mentioned…

Authored by: M, Mohanasundaram and Neil Tyagi In today’s rapidly evolving cyber landscape, malware threats continue to adapt, employing new tactics and leveraging popular platforms to reach unsuspecting victims. One such emerging threat is the Lumma Stealer—a potent information-stealing malware recently gaining traction through Telegram channels. With Telegram’s popularity as a messaging and sharing platform, threat actors have identified it as a lucrative distribution vector, bypassing traditional detection mechanisms and reaching a broad, often unsuspecting audience. Fortunately, McAfee’s advanced security solutions are equipped to detect and mitigate threats like Lumma Stealer. Through cutting-edge threat intelligence, behavioral analysis, and real-time monitoring,…

Storm-2372 used the device code phishing technique since August 2024  |  SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 33  |  Security Affairs newsletter Round 511 by Pierluigi Paganini – INTERNATIONAL EDITION  |  U.S. CISA adds Apple iOS and iPadOS and Mitel SIP Phones flaws to its Known Exploited Vulnerabilities catalog  |  Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug  |  China-linked APT Salt Typhoon breached telecoms by exploiting Cisco router flaws  |  Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacks  |  Valve removed the game PirateFi from the Steam video game platform because contained a malware  | …

Valentine’s day is a great time for many people, however, for many who are lonely because they have lost a loved one, or are single for whatever reason, this can also be a time of depression and a reminder of their loss. Our older generations can be especially prone to feelings of loneliness and loss as they age and lose people close to them to the effects of time. The National Institute on Aging says, “Older adults are at higher risk for social isolation and loneliness due to changes in health and social connections that can come with growing older,…

The government of Thailand has cut the power supply to areas near its border with Myanmar that are known to host brutal scam compounds. These heavily-guarded fraud factories house armies of people, coerced into defrauding innocent people through bogus investment and romance baiting scams.The operators of the compounds earn billions of dollars each year from computer victims worldwide, with many of those in the compound misled or coerced to work for the scammers, trapped in virtual slavery.In the past, media reports have published distressing details of the treatment of fraud factory workers on the Myanmar-Thai border and in Cambodia.Citing national…