Author: HackWatchit

In brief Trump has tapped Bitcoin-friendly economist Stephen Miran for a seat on the Federal Reserve Board. Bitcoin jumped 2%, topping $117,500 as traders expect looser Fed policy under Miran. Still, one analyst warns the Fed’s credibility could erode, echoing 1970s inflation risks. Bitcoin has shaken off the prior week’s market jitters to regain a foothold near $117,500, following President Donald Trump’s surprise pick of economist Stephen Miran for the Federal Reserve Board.In a statement Thursday on Truth Social, Trump said Miran, who currently serves as chairman of the Council of Economic Advisors and a known Bitcoin supporter, would fill…

“In an Exchange hybrid deployment, an attacker who first gains administrative access to an on-premises Exchange server could potentially escalate privileges within the organization’s connected cloud environment without leaving easily detectable and auditable trace,” Microsoft has announced on Wednesday. The privilege escalation can be performed by exploiting CVE-2025-53786, a newly disclosed vulnerability that stems from Exchange Server and Exchange Online sharing the same service principal – i.e., the Office 365 Exchange Online application – in hybrid configurations. (The app is used to authenticate and secure the communication between Exchange Server and Exchange Online.) What is an Exchange hybrid deployment? A…

Air France and KLM disclosed data breaches following the hack of a third-party platform Pierluigi Paganini August 07, 2025 Air France and KLM warn of a data breach exposing customer data via unauthorized access to a third-party platform. Air France and KLM reported a data breach after hackers accessed a third-party platform, potentially exposing some customers’ personal information. Both airlines confirmed that threat actors gained access to the platform of an unnamed service provider used for customer support. Air France and KLM’s IT security teams, with the help of external experts, quickly stopped unauthorized access. They also announced the adoption…

Written by Kaitlyn Wimberley || Reviewed by Beau Bullock This blog is part of Offensive Tooling Cheatsheets: An Infosec Survival Guide Resource. You can learn more and find all of the cheatsheets HERE: https://www.blackhillsinfosec.com/offensive-tooling-cheatsheets/ GraphRunner Cheatsheet: PRINT-FRIENDLY PDF Find the tool here: https://github.com/dafthack/GraphRunner   GraphRunner is a collection of post-exploitation PowerShell modules for interacting with the Microsoft Graph API. It provides modules for enumeration, exfiltration, persistence, and more! Installation git clone https://github.com/dafthack/GraphRunner cd GraphRunner Import-Module .\GraphRunner.ps1 List all of the available GraphRunner modules: List-GraphrunnerModules Obtaining Tokens Obtain tokens with the Device Code authentication flow: Get-GraphTokens (Requests tokens for the Microsoft Office…

Two malicious NPM packages posing as WhatsApp development tools have been discovered deploying destructive data-wiping code that recursively deletes files on a developer’s computers. Two malicious NPM packages currently available in the registry target WhatsApp developers with destructive data-wiping code. The packages, discovered by researchers at Socket, masquerade as WhatsApp socket libraries and were downloaded over 1,100 times since their publication last month. Despite Socket having filed takedown requests and flagging the publisher, nayflore, both remain available at the time of writing. The names of the two malicious packages are naya-flore and nvlore-hsc, though the same publisher has submitted more on NPM,…

In Part 3.1 we started discussing how decomposes the time series data into trend, seasonality, and residual components, and as it is a smoothing-based technique, it means we need rough estimates of trend and seasonality for STL to perform smoothing. For that, we calculated a rough estimate of a trend by calculating it using the Centered Moving Averages method, and then by using this initial trend, we also calculated the initial seasonality. (Detailed math is discussed in Part 3.1) In this part, we implement the LOESS (Locally Estimated Scatterplot Smoothing) method next to get the final trend and seasonal components…

Competition in the eCommerce industry is becoming increasingly rivalled. As consumers turn to online stores, more and more retailers are making the jump themselves and pivoting towards digital. Joining such a lucrative market is a no brainer for retailers. However, competition between retailers has led to the development of shady market manipulation tactics like price-scraping. Price-scraping is a rapidly growing problem in eCommerce. Bots powered by artificial intelligence (AI) are programmed with the express purpose of harvesting data from eCommerce sites. Businesses and Fraudsters can then use this data to undercut their legitimate competitors’ prices and steal their audience. The…

Over 40,000 websites running a vulnerable version of a popular WordPress plugin could be at risk of being hijacked by hackers.The Post SMTP plugin is an add-on used by approximately 400,000 WordPress-powered websites to improve the reliability and security of their email delivery. The plugin has proven popular in part because of its marketing that presents it as a more reliable and full-featured replacement to the default email functionality built into WordPress.According to a report by Patchstack, an ethical hacker responsibly disclosed a serious vulnerability in the Post SMTP plugin.The flaw allowed website users who should only have low privileges,…

CISA directs agencies to mitigate ‘high-severity’ Microsoft vulnerability CISA is giving agencies until 9 a.m. Monday to address a vulnerability that, left unaddressed, could allow hackers to achieve “total domain compromise.” Justin Doubleday@jdoubledayWFED August 7, 2025 2:05 pm 3 min read The Cybersecurity and Infrastructure Security Agency is giving agencies through the weekend to patch a critical vulnerability in hybrid configurations of Microsoft’s widely used Exchange product. In an emergency directive issued early Thursday afternoon, CISA is giving agencies until 9 a.m. on Monday, Aug. 11, to mitigate the Microsoft Exchange vulnerability. CISA said it was not aware of active…