Author: HackWatchit

Sarcoma ransomware gang claims the theft of sensitive data from PCB maker Unimicron Pierluigi Paganini February 13, 2025 The Sarcoma ransomware group announced a breach of the Taiwanese printed circuit board (PCB) manufacturing giant Unimicron. The Sarcoma ransomware group claims to have breached Taiwanese PCB manufacturer Unimicron, leaked sample files, and threatened a full data release if no ransom is paid by Tuesday, February 20, 2025. Unimicron Technology Corporation is a Taiwanese company specializing in the manufacturing of printed circuit boards (PCBs), high-density interconnects (HDI), and IC substrates. It is a key supplier in the semiconductor and electronics industries, providing…

Grip Security has unveiled its SaaS Security Posture Management (SSPM) solution, which proactively identifies misconfigurations, enforces best practices and strengthens SaaS security posture against emerging risks. Unlike traditional SSPM products, Grip SSPM is built on a foundation of visibility and automation, enabling organizations to combine misconfiguration remediation and policy enforcement as part of a comprehensive security program that addresses SaaS security end-to-end. By consolidating SaaS security into a single platform, Grip SSPM streamlines operations, automates risk reduction and ensures continuous compliance. “Monitoring and remediating SaaS configuration issues is critical to a modern SaaS security strategy. Grip’s approach ensures organizations solve…

Each year, Data Protection Day marks an opportunity to assess the state of privacy and security in the midst of technological innovation. This year’s inflection point follows a robust dialogue on AI from last week’s World Economic Forum Annual Meeting in Davos. As CrowdStrike participated in these discussions, we emphasized the importance of leveraging AI to defend against ever-evolving cyber threats and protect the very data and workloads used to power AI. The Evolving Role of AI in Data Protection Embracing Privacy-by-Design and Secure-by-Design is paramount in everything from the training data that powers AI models to the queries used…

Authored by Dexter Shin Over the years, cyber threats targeting Android devices have become more sophisticated and persistent. Recently, McAfee Mobile Research Team discovered a new Android banking trojan targeting Indian users. This malware disguises itself as essential services, such as utility (e.g., gas or electricity) or banking apps, to get sensitive information from users. These types of services are vital for daily life, making it easier to lure users. We have previously observed malware that masquerades as utility services in Japan. As seen in such cases, utility-related messages, such as warnings that gas service will disconnect soon unless the…

This webcast was originally broadcast on October 24, 2024. In this video, Michael Allen discusses adversary-in-the-middle post-exploitation techniques and processes. He explains how his team at Black Hills Information Security conducts continuous penetration testing to find vulnerabilities and improve security. The session covers practical steps attackers take post-exploitation, how to defend against these attacks, and the importance of persistent testing to identify and remediate security gaps effectively. The webinar focused on post-exploitation strategies following adversary-in-the-middle attacks, specifically targeting single sign-on portals to gain access and maintain persistence. One of the main strategies discussed was creating email rules to prevent users…

It’s taken nearly ten years, but the US Department of Justice (DOJ) has just announced the court-approved seizure of a web domain called LolekHosted.net that was allegedly connected to a wide range of crimeware-as-a-service activities. The DOJ also charged a 36-year-old Polish man named Artur Karol Grabowski in connection with running the service, but his current whereabouts are unknown. In the DOJ’s blunt words, “Grabowski remains a fugitive.” The downed site is still technically online, but now presents a warning notice to visitors: Bulletproof hosting Sites of this sort are known in the jargon as bulletproof hosts, whose operators like…

Machine learning and AI are among the most popular topics nowadays, especially within the tech space. I am fortunate enough to work and develop with these technologies every day as a machine learning engineer! In this article, I will walk you through my journey to becoming a machine learning engineer, shedding some light and advice on how you can become one yourself! My Background In one of my previous articles, I extensively wrote about my journey from school to securing my first Data Science job. I recommend you check out that article, but I will summarise the key timeline here.…

If you are on social media, you’ve almost certainly received an unsolicited DM from an obvious shell account — possibly a provocative message, accompanied by a generic profile picture, and a few sketchy posts with minimal activity. This typically warrants hitting the “Block” icon. Unfortunately, it won’t be so simple in the future, and some people have already learned the hard way that online romance scammers are rapidly improving their techniques. What used to be seen as uncommon or even embarrassing is now the norm: Research shows that online dating is one of the most popular ways for Americans to meet…

HyveDA reached a supply cap of $50 million in pre-deposits from early contributors. The deposit phase began with the launch of the Symbiotic mainnet on January 28 and completed within two weeks. The deposits occurred during a market decline triggered by President Trump’s tariff policy. Contributors participated through two vault types. One vault is managed by HyveDA and additional vaults are provided by partners including EtherFi, Renzo, MEV Capital, Re7, Steakhouse, Gautlet, and P2P. Investors deposited assets into the vaults to become eligible for points that will be assigned after the deposit phase and carried forward to later phases.The deposited…