Author: HackWatchit
Amazon Prime Day has become a major shopping event, with 2023 setting a record as customers purchased over 375 million items worldwide, up from 300 million in 2022. As more people rush to find deals, scammers are using increasingly advanced tactics to exploit unsuspecting consumers. What’s Different This Year? The use of AI has significantly changed how scams are created and deployed. Tools like ChatGPT have seen explosive growth, reaching 100 million users in the first couple of months after launch — the fastest-growing consumer application in history. This widespread use of AI tools allows scammers to craft highly convincing…
China’s Salt Typhoon hackers are still actively targeting telecoms worldwide and have breached more U.S. telecommunications providers via unpatched Cisco IOS XE network devices. Recorded Future’s Insikt Group threat research division states that the Chinese hacking group (tracked Salt Typhoon and RedMike) has exploited the CVE-2023-20198 privilege escalation and CVE-2023-20273 Web UI command injection vulnerabilities. These ongoing attacks have already resulted in network breaches at multiple telecommunications providers, including a U.S. internet service provider (ISP), a U.S.-based affiliate of a U.K. telecommunications provider, a South African telecom provider, an Italian ISP, and a large Thailand telecommunications provider. The threat researchers…
How to use zero-trust architecture effectively in today’s modern cloud-dependent infrastructures.
This webcast was originally published on September 26, 2024. In this video, Kevin Klingbile from Black Hills Information Security discusses the intricacies of Azure Cloud services and M365, focusing on the differences between unauthenticated and authenticated reconnaissance in penetration testing. He provides a thorough walk-through of various tools and techniques for conducting effective recon, including username enumeration, password spraying, and extracting tokens. Kevin also shares practical insights on setting up developer subscriptions for Azure and emphasizes the importance of maintaining situational awareness to enhance security posture. The webinar focused on the differences between M365 and Azure Cloud services, and the…
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft fixes two actively exploited zero-days (CVE-2025-21418, CVE-2025-21391)February 2025 Patch Tuesday is here, and Microsoft has delivered fixes for 56 vulnerabilities, including two zero-days – CVE-2025-21418 and CVE-2025-21391 – under active exploitation. PAN-OS authentication bypass hole plugged, PoC is public (CVE-2025-0108)Palo Alto Networks has fixed a high-severity authentication bypass vulnerability (CVE-2025-0108) in the management web interface of its next-gen firewalls, a proof-of-concept exploit (PoC) for which has been made public. February 2025 Patch Tuesday forecast: New directions for AI developmentThe new year has started with…
Authored by: Fernando Ruiz The McAfee mobile research team recently identified a significant global increase of SpyLoan, also known as predatory loan apps, on Android. These PUP (potentially unwanted programs) applications use social engineering tactics to trick users into providing sensitive information and granting extra mobile app permissions, which can lead to extortion, harassment, and financial loss. During our investigation of this threat, we identified fifteen apps with a combined total of over eight million installations. This group of loan apps share a common framework to encrypt and exfiltrate data from a victim’s device to a command and control (C2) server…
Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug Pierluigi Paganini February 15, 2025 Threat actors are exploiting a recently disclosed vulnerability, tracked as CVE-2025-0108, in Palo Alto Networks PAN-OS firewalls. Researchers warn that threat actors are exploiting a recently disclosed vulnerability, tracked as CVE-2025-0108, in Palo Alto Networks PAN-OS firewalls. The Shadowserver Foundation researchers observed several CVE-2025-0108 attempts since 4 am UTC 2024-02-13 in their honeypots. The experts said that the malicious traffic was originated from 19 IPs seen, attackers attempted to use a recently published PoC exploit code for this vulnerability (with a few creative exceptions). Many Palo…
Image: Shutterstock. Greg Meland. President Trump last week issued a flurry of executive orders that upended a number of government initiatives focused on improving the nation’s cybersecurity posture. The president fired all advisors from the Department of Homeland Security’s Cyber Safety Review Board, called for the creation of a strategic cryptocurrency reserve, and voided a Biden administration action that sought to reduce the risks that artificial intelligence poses to consumers, workers and national security. On his first full day back in the White House, Trump dismissed all 15 advisory committee members of the Cyber Safety Review Board (CSRB), a nonpartisan…
Greetings Hackers,For the second time this year, we’re excited to announce a new writing contest on HackerNoon: the #blockchain Writing Contest presented by Aleph Cloud and HackerNoon. New to HackerNoon writing contests? Find out about active contests, participation guidelines, and more at contests.hackernoon.com The #blockchain Writing Contest puts decentralization—a core tenet of blockchain technology—front and center, challenging participants to discuss the current and future impact of three main applications of decentralized technologies: #decentralized-ai, #decentralized-cloud, and #dePIN, for a chance to win up to $2,000! The ideal participant is a writer, developer, or industry expert who understands how decentralization affects tech company…