Author: HackWatchit

Can a Simple Conversation Unlock the Future of Decentralized Finance? What if interacting with the complex world of decentralized finance was as simple as sending a text message? For years, the promise of DeFi, a parallel financial system built on blockchain technology, has been available to a select few who could navigate its steep learning curve. Now, an emerging web3 startup edwin has publicly launched an AI terminal, a move that signals a potential shift in how people interact with this emerging financial landscape. The release aims to transform complex financial transactions into simple conversations, potentially opening the doors of…

Author/Presenter: Cameron Knauff (stillOS Developer) Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the organizations YouTube channel. Thanks and a Tip O’ The Hat to Verification Labs :: Penetration Testing Specialists :: Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE for recommending and appearing as speaker at the LinuxFest Northwest conference. Permalink *** This is a Security Bloggers Network…

The FBI warns that Scattered Spider is now targeting the airline sector Pierluigi Paganini June 28, 2025 The FBI warns that Scattered Spider is now targeting the airline sector. Feds are working with aviation partners to combat the threat and assist affected victims. The FBI reports that the cybercrime group Scattered Spider is now targeting the airline sector. The cybercriminals are using social engineering techniques to gain access to target organizations by impersonating employees or contractors. In many cases, threat actors employed methods to bypass multi-factor authentication (MFA), by tricking victims’ help desk services to add unauthorized MFA devices to…

Joff Thyer // Picture a scenario whereby you are involved in an internal network penetration test. Perhaps you have succeeded with a spear-phishing campaign and landed on an internal system, or perhaps you have been placed there to begin with. Being the l33t ninja penetration tester that you are, you lead with some low n’ slow outbound port scanning and quickly realize you have a handful of useful TCP ports available for Command and Control (C2) communications. Either using your pre-existing C2 channel or by establishing another one, you begin to look for privilege escalation. Naturally, you whip out good…

Intro In Computer Science, just like in human cognition, there are different levels of memory: Primary Memory (like RAM) is the active temporary memory used for current tasks, reasoning, and decision-making on current tasks. It holds the information you are currently working with. It’s fast but volatile, meaning that it loses data when the power is off. Secondary Memory (like physical storage) refers to long-term storage of learned knowledge that is not immediately active in working memory. It’s not always accessed during real-time decision-making but can be retrieved when needed. Therefore, it is slower but more persistent. Tertiary Memory (like…

WIRED published a shocking investigation this week based on records, including audio recordings, of hundreds of emergency calls from United States Immigration and Customs Enforcement (ICE) detention centers. The calls—which include reports of incidents of staff sexual assaults, suicide attempts, and head injuries—indicate a system inundated by life-threatening incidents, delayed treatment, and overcrowding.In a 6-3 decision on Friday, the US Supreme Court upheld a Texas porn ID law, finding that age verification for explicit sites is constitutional. In a dissent, Justice Elena Kagan warned that this determination ignores First Amendment precedent and will have privacy implications for adults.Looking at the…

David Fletcher // Have you ever looked at Nessus scan results to find the below in the output? Recently I was on engagement and encountered just this situation.  I found myself wondering how in the world I would validate all of these findings for SSL/TLS. Luckily, one of my co-workers suggested I take a look at testssl.sh.  This tool sped up the process significantly and I found that I could do some really great things with its output. Before we get into testing at scale, we should become familiar with the tool and its output.  As you’ve probably already guessed,…

A patient’s death has been officially connected to a cyber attack carried out by the Qilin ransomware group that crippled pathology services at several major NHS hospitals in London last year. The cyber attack on Synnovis, a key pathology provider, caused widespread disruption to vital diagnostic services, delaying critical blood test results and impacting patient care significantly. King’s College Hospital NHS Foundation Trust confirmed that a patient unexpectedly died during the cyber-incident. A spokesperson for the trust revealed that a detailed review of the patient’s care found multiple contributing factors, including “a long wait for a blood test result due…

​​Microsoft has released the KB5060829 preview cumulative update for Windows 11 24H2, which includes 38 changes, including improvements to the taskbar and a new PC-to-PC migration experience. The KB5060829 update is an optional non-security preview update that delivers updates at the end of each month, allowing Windows admins to test bug fixes, improvements, and new features that will roll out to all users during next month’s Patch Tuesday release. However, unlike regular Patch Tuesday cumulative updates, monthly preview updates like this one do not include security updates. With KB5060829, Microsoft begins rolling out a PC-to-PC migration experience, which enables Windows…