Author: HackWatchit

BadCam: Linux-based Lenovo webcam bugs enable BadUSB attacks Pierluigi Paganini August 10, 2025 Lenovo webcam flaws, dubbed BadCam, let attackers turn them into BadUSB devices to inject keystrokes and launch OS-independent attacks. Eclypsium researchers found vulnerabilities in some Lenovo webcams, collectively dubbed BadCam, that could let attackers turn them into BadUSB devices to inject keystrokes and launch OS-independent attacks. Principal security researchers Jesse Michael and Mickey Shkatov demonstrated the flaws at DEF CON 33. This is likely the first proof that a compromised Linux-based USB peripheral already connected to a computer can be weaponized for malicious purposes. “Eclypsium researchers discovered…

Microsoft has announced that the Microsoft 365 apps for Windows will start blocking access to files via the insecure FPRPC legacy authentication protocol by default starting late August. These changes apply only to Microsoft 365 apps for Windows and will not affect Microsoft Teams users across Windows, Mac, web, iOS, or Android. “Microsoft 365 apps will block insecure file open protocols like FPRPC by default starting version 2508, with new Trust Center settings to manage these protocols,” the company said in a new Microsoft 365 Admin Center message on Wednesday. “These changes enhance security by reducing exposure to outdated technologies…

In discussions over TSA’s biometric use at airports, critics often blur the line between authorized identity verification and unsanctioned surveillance. But TSA operates under defined legal mandates, privacy protections, and existing standards—many of which mirror those used by CBP and Secure Flight.  CBP & TSA: Consistent Identity Verification Roles At U.S. international ports of entry—airports, land crossings, and seaports—Customs and Border Protection (CBP) conducts biometric and document checks on arriving travelers. These processes match passports or visas against live facial images to verify identity. The public generally accepts this as a necessary border function; TSA’s checkpoint protocols follow the same…

Total VPN not working with Amazon Prime? Amazon Prime is region-locked, but you can watch Prime Video on vacation using our Total VPN troubleshooting tips. Total VPN is a fast and reliable VPN that you can get as part of the TotalAV antivirus bundle. It is a highly affordable VPN that works to watch popular streaming platforms from anywhere in the world. Having issues trying to watch Amazon Prime Video abroad? Receiving the Amazon Prime location error or the Amazon Prime proxy error? This guide explains how to resolve Total VPN Amazon Prime streaming issues, allowing you to resume watching…

ction and Motivation Stellar flares are bursts of energy released by stars, believed to be caused by magnetic line reconnection [1,2]. It is characterized by a sudden spike in the star’s brightness, followed by a slow exponential decay [1,2]. But why care about detecting them? The reason is that they play an important role in our understanding of the universe. They help us gain insight into topics such as stellar magnetic fields, rotation, mass-loss rates, and atmospheric evolution of these stars’ orbiting planets [1,2]. However, as you probably expected, it’s not as easy as it sounds. Firstly, stellar flares don’t…

AgentFlayer is a critical vulnerability in ChatGPT Connectors. Learn how this zero-click attack uses indirect prompt injection to secretly steal sensitive data from your connected Google Drive, SharePoint, and other apps without you knowing. A new security flaw, dubbed AgentFlayer, has been revealed that demonstrates how attackers can secretly steal personal information from users’ connected accounts, like Google Drive, without the user ever clicking anything. The vulnerability was discovered by cybersecurity researchers at Zenity and presented at the recent Black Hat conference. As per Zenity’s research, the flaw takes advantage of a feature in ChatGPT called Connectors, which allows the…

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Black Hat USA 2025Black Hat USA 2025 took place at the Mandalay Bay Convention Center in Las Vegas. Explore related news, photos, product releases, and more. AIBOMs are the new SBOMs: The missing link in AI risk managementIn this Help Net Security interview, Marc Frankel, CEO at Manifest Cyber, discusses how overlooked AI-specific risks, like poisoned training data and shadow AI, can lead to security issues that conventional tools fail to detect. He explains how AI Bills of Materials (AIBOMs) extend SBOMs to provide transparency…

“If I had an hour to solve a problem, I would spend 55 minutes thinking about the problem and five minutes finding the solution.” – Albert Einstein Introduction: I’m a big fan of graphing password cracking sessions. It’s a good way to figure out what’s working and what isn’t by highlighting trends that get lost in the final “cracking success” number. The very first thing I look for in these graphs is saw-tooth steps. This is an easy way to spot potential improvements. If you suddenly see a quick run of cracks in your password cracking success rate, which is what…

In brief Hï Ibiza, The Night League, and W1 Curates have launched the world’s first permanent art gallery inside a nightclub. Installations include AR murals, large-scale sculptures, and mirrored LED gallery walls. Exhibition lineup changes every two weeks, with some works available for purchase. The world’s top-ranked nightclub has opened what its owners say is the first permanent art gallery inside a club, as part of an effort to blend nightlife with digital art.Hï Ibiza, named the world’s best club by DJ Mag for four consecutive years, unveiled the gallery this summer along with Ibiza-based nightlife group The Night League…