Author: HackWatchit

Reporting is a penetration testing topic that doesn’t have a whole lot of popularity. People have a hard time being inspired to write about the technical details of their engagements. In some cases, testers skim the surface only identifying the successful portions of their test. In others, testers just regurgitate the output from some scanning tool calling the results the final report. However, sometimes you find a tester who creates a work of art.  It covers successful exploitation, the things that didn’t work, identifies the impact of a vulnerability in a way that the organization can understand, recommends corrective action, and…

The UK government has appointed Blaise Florence Metreweli as the next Chief of the Secret Intelligence Service (SIS), also known as MI6. Metreweli will take up the role, traditionally referred to by the codename “C,” succeeding Sir Richard Moore, who is stepping down after five years in the post. Metreweli’s appointment marks a historic first for the agency. She will become the first woman to lead MI6 in its 116-year history. Her promotion reflects both her extensive career within British intelligence and a broader shift toward greater diversity and representation at senior levels of the UK’s national security apparatus. Currently…

Ah, summer. The season of sun-soaked beaches, bucket list adventures, and Instagram-worthy Aperol Spritzes. For many, it’s also a time of new connections—whether it’s a whirlwind vacation romance, a flirtatious chat over sangria, or that handsome stranger who slides into your DMs while you’re posting travel pics.  But while your heart may be on holiday, romance scammers are very much on the job.  Every summer, there’s a spike in cybercrime that preys on people’s heightened emotions, loneliness, and lowered guard while traveling. Romance scams aren’t just the stuff of Netflix documentaries or embarrassing Reddit threads—they’re a multi-billion dollar business. In…

New research by Infoblox Threat Intel exposes a hidden alliance between major cybercrime groups like VexTrio and seemingly legitimate AdTech firms such as Los Pollos, Partners House, BroPush, and RichAds. Discover how malware, including DollyWay, shifted operations, revealing shared infrastructure and tactics. Infoblox Threat Intel has exposed a secret alliance between two cybercrime groups, VexTrio and seemingly legitimate AdTech companies. This discovery came after disrupting VexTrio, causing many malware groups to shift to a single, previously hidden provider. The investigation began by disrupting VexTrio’s Traffic Distribution System (TDS). A TDS acts like a digital traffic controller, directing website visitors to…

Investigators have linked a figure in the $30 million ZKasino alleged scam to a fresh cryptocurrency project branded WhiteRock (WHITE), on-chain analyst ZachXBT reported in a June 16 post on X.WhiteRock surfaced in December 2024 with an anonymous team, overstated user counts, and unverifiable claims about a USDX reserve, researchers at Blokiments wrote in a memo dated June 13.EvidenceZachXBT added fresh evidence by finding an influencer that received payment from a WhiteRock-tied wallet, which also aggregates deposits traceable to ZKasino’s treasury.Separate transfers in February and March show identical amounts exiting a ZKasino wallet to an instant exchange and entering WhiteRock…

David Fletcher & Sally Vandeven // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. We gave a presentation at the GrrCon hacker conference in Grand Rapids, MI on October 6, 2016. The presentation was a dialogue meant to illustrate the friendly banter between a blue-teamer trying to protect a network and a red-teamer trying to attack it.  The topics that were discussed…

Authors/Presenters: José Ibañez (CEO at Blind Penguin), Raissa Ibañez (Manager At Blind Penguin) Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the organizations YouTube channel. Thanks and a Tip O’ The Hat to Verification Labs :: Penetration Testing Specialists :: Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE for recommending and appearing as speaker at the LinuxFest Northwest conference.…

CYFIRMA has released its latest Industry Report, spotlighting cybersecurity threats facing the global healthcare sector. In the past 90 days, the firm identified 130 confirmed ransomware attacks targeting the healthcare sector, accounting for 8.1 percent of the 1,605 total victims across industries, placing healthcare as the sixth most-targeted among 14 tracked sectors. Pharma and biotech, hospitals, and clinics are the most frequent victims of ransomware in this industry, while primary care and senior care are also frequently targeted. Ransomware attacks in the healthcare sector are dominated by the U.S. for-profit segment, with 70 out of 130 victims based in the…

of every data-driven application, product, or dashboard lies one critical component: the database. These systems have long been the foundation for storing, managing, and querying structured data — whether relational, time-series, or distributed across cloud platforms. To interact with these systems, we’ve relied on SQL (Structured Query Language), a standardized and incredibly powerful way to retrieve, manipulate, and analyze data. SQL is expressive, precise, and optimized for performance. Yet for many users — especially those new to data — SQL can be intimidating. Remembering syntax, understanding joins, and navigating complex schemas can be a barrier to productivity. But the idea…