Author: HackWatchit
With over 100 integrations and capabilities spanning five major categories of security outcomes, Cisco XDR offers an incredibly powerful ecosystem for users, partners, and prospective customers. But with so many tools, workflows, and data sources available, finding the right integration or automation can feel overwhelming. That’s why we’re excited to introduce Cisco XDR Connect—a new tool designed to make navigating this rich ecosystem easier than ever. With a clean, intuitive interface and no Cisco XDR login required, XDR Connect lets users search, browse, and explore integrations and automation capabilities all in one place. More than just a catalog, Cisco XDR…
Cybersecurity journalist Kim Zetter, testifying before Congress, described Stuxnet as the first cyberattack to move beyond digital disruption and inflict physical damage on real-world systems. Unlike earlier malware that disabled or corrupted computer networks, Stuxnet was engineered to target the industrial centrifuges used in Iran’s uranium enrichment program, silently degrading critical infrastructure from within. Zetter warned that the same techniques could be deployed against civilian and military systems worldwide, disrupting essential services, damaging equipment, and in some cases, causing loss of life. “Stuxnet was discovered the same year Operation Aurora was uncovered. Aurora was an espionage campaign, attributed to China,…
With the latest Windows 11 update, Microsoft is saying goodbye to the infamous “Blue Screen of Death” and has enabled the quick machine recovery feature by default for Home users. “For nearly four decades, the blue screen shown during an unexpected restart has been a visual shorthand for something going wrong,” says Monika Sandhu, Senior Program Manager at Microsoft. “The new UI is simpler, and more aligned with Windows 11’s design language. It removes the frowny face and QR code, and instead presents a short, readable message with the stop code [e.g., CRITICAL_PROCESS_DIED] and faulty driver information.” The black ‘unexpected…
Crypto likes to claim it’s banking the unbanked, but few have built for people without smartphones or internet. Fedrok is rolling out USSD wallets, tokenized carbon credits, and solar-powered ID-linked payments across parts of Africa, the Pacific, and South Asia. In this Q&A, CEO Philip Blazdell shares the on-the-ground reality of building inclusive infrastructure and why crypto’s future might lie far from the headlines. 1. Crypto often praises financial inclusion as a goal but what does that actually look like on the ground? What have been the most surprising challenges or breakthroughs in designing infrastructure for people without smartphones or…
Ransomware, considered by British authorities to be the UK’s greatest cybercrime threat, costing the nation billions of pounds and with the capbility to bring essential services to a standstill, is in the gunsights of government.The Home Office has confirmed that it is seeking to legally ban public bodies from paying ransom demands to cybercriminals.The ban would prevent operators of critical national infrastructure, the NHS, local councils and school, from giving in to digital extortionists – in the hope that criminals will have their business model disrupted, and that consequently they will find such organisations a less attractive target in future.And…
Corporate payments company Corpay plans to accelerate its entry into investment funds by acquiring Alpha Group International, a provider of B2B cross-border foreign exchange (FX) solutions to corporations and investment funds in the United Kingdom and Europe. Alpha’s board intends to recommend that Alpha shareholders vote in favor of the deal, and, subject to shareholder and regulatory approval and standard closing conditions, the transaction is expected to close in the fourth quarter, the companies said in a Wednesday (July 23) press release. The acquisition values Alpha at an enterprise valuation of about $2.2 billion, according to the release. Corpay Chairman and CEO Ron Clarke said…
Active Directory Certificate Services (ADCS) is used to manage certificates for systems, users, applications, and more in an enterprise environment. Misconfigurations in ADCS can introduce critical vulnerabilities into an enterprise Active Directory environment. A few escalation techniques are covered in ESC1, ESC2&3, ESC4, ESC8. Each of those blogs include some of the security event IDs that could be used to detect these attacks. In this blog post, we are going to walk through how to detect some of these attacks in detail. Let’s Check the Logs …Wait Well, first things first, to create an alert for malicious activity, we need…
Hardcoded credentials found in HPE Aruba Instant On Wi-Fi devices Pierluigi Paganini July 22, 2025 Hardcoded credentials in HPE Aruba Instant On Wi-Fi devices, let attackers to bypass authentication and access the web interface. HPE disclosed hardcoded credentials in Aruba Instant On Wi-Fi devices that allow attackers to bypass login and access the web interface. The flaw tracked as CVE-2025-37103 (CVSS score of 9.8) impacts devices running firmware version 3.2.0.1 and below. Aruba Instant On is a line of plug-and-play Wi-Fi access points are designed specifically for small and medium-sized businesses (SMBs). The product provides reliable, secure, and easy-to-manage wireless…
Ukrainian authorities, with help from French police and Europol, have arrested a person suspected of running one of the largest Russian-language cybercrime hubs out there, XSS.is. It all started with a long-running investigation that began in mid‑2021 in France. Prosecutors gradually traced encrypted logs and hacker chatter back to an individual living in Ukraine, culminating in their arrest on July 22, 2025. Press release of the XSS.IS’ suspect admin arrest from the Paris Public Prosecutor’s Office on LinkedIn XSS.is has been quietly operating since around 2013. The forum became notorious as a central marketplace for hijacked system access, malware, stolen credentials,…