Author: HackWatchit
Carrie Roberts // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. Tired of typing those Empire commands to startup your goto listeners? Wish there was an equivalent to Metasploit resource files for Empire? This is not currently implemented as far as I know, so until then here is a hack to make it happen. When I’m working with tools…
Swedish Prime Minister Ulf Kristersson says his country is under attack, after days of hard-hitting DDoS attacks against SVT Sweden’s public TV broadcaster, government websites, and other key organisations. For a while, SVT’s TV stations and news services were knocked offline as a result, in what have been the biggest DDoS attacks it has ever experienced. Sweden joined NATO in 2024, and has seen a dramatic rise in DDoS attacks ever since. Unsurprisingly all eyes are on Russia as likely culprits for the attacks. Sign up to our free newsletter.Security news, advice, and tips. Remember – not all cyber attacks…
With demonstrations ramping up against the Trump administration, this week was all about protests. With President Donald Trump taking the historic step to deploy US Marines and the National Guard to Los Angeles, we dove into the “long-term dangers” of sending troops to LA, as well as what those troops are permitted to do while they’re there.Of course, it’s not just the military getting involved in the LA protests against the heavy crackdowns by Immigration and Customs Enforcement (ICE). There’s also Customs and Border Protection (CBP), which further escalated federal involvement by flying Predator drones over LA. And there are…
Unity is one of the most popular game engines for mobile and cross-platform app development. It powers millions of games and applications across platforms including iOS, Android, and desktop. While building an engaging app is important, monetization is what turns your development effort into a sustainable business. In this article, we explore the best practices for monetizing Unity apps, with a particular focus on advertising and in-app purchases (IAP). Why Monetization Strategy Matters Choosing the right monetization strategy from the start can greatly influence your app’s success. A poorly implemented monetization model can frustrate users and result in low retention,…
Never miss a new edition of The Variable, our weekly newsletter featuring a top-notch selection of editors’ picks, deep dives, community news, and more. The agentic-AI landscape continues to evolve at a staggering rate, and practitioners are finding it increasingly challenging to keep multiple agents on task even as they criss-cross each other’s workflows. To help you minimize chaos and maintain inter-agent harmony, we’ve put together a stellar lineup of articles that explore two recently launched tools: Google’s Agent2Agent protocol and Hugging Face’s smolagents framework. Read on to learn how you can leverage them in your own cutting-edge projects. Inside Google’s Agent2Agent…
WestJet, Canada’s second-largest airline, is investigating a cyberattack that has disrupted access to some internal systems as it responds to the breach. “WestJet is aware of a cybersecurity incident involving internal systems and the WestJet app, which has restricted access for several users,” reads a security advisory on WestJet’s site. “We have activated specialized internal teams in cooperation with law enforcement and Transport Canada to investigate the matter and limit impacts.” “We are expediting efforts to maintain the safety of our operation and safeguard sensitive data and personal information for both our guests and employees, and we apologize to all guests…
In my last two posts I showed how to insert tracking bugs in both .docx (Part 1) and .xlsx files (Part 2). But don’t let all that effort go to waste by leaving metadata in that could lead back to you. When you save a file in Microsoft Office some metadata about you is stored, such as the author name. Choose the File->Info menu and you can see what value is set as the author. If it is something generic or purposely misleading you may wish to leave it as-is. The instructions below were made with Microsoft Office 2013 for Windows. Author Metadata…
Unusual toolset used in recent Fog Ransomware attack Pierluigi Paganini June 14, 2025 Fog ransomware operators used in a May 2025 attack unusual pentesting and monitoring tools, Symantec researchers warn. In May 2025, attackers hit an Asian financial firm with Fog ransomware, using rare tools like Syteca monitoring software and pentesting tools GC2, Adaptix, and Stowaway. Symantec researchers pointed out that the use of these tools is unusual for ransomware campaigns. Notably, attackers created a service post-attack to maintain access, a rare persistence move. The attackers remained in the network for two weeks before launching the ransomware, signaling a more…
OffSec has released Kali Linux 2025.2, the most up-to-date version of the widely used penetration testing and digital forensics platform. KDE Plasma 6.3 in Kali Linux 2025.2 (Source: OffSec) New in Kali Linux 2025.2 As per usual, the newest Kali version comes with new community wallpapers and new versions of the KDE Plasma and GNOME graphical desktop environments. This time around, the Kali Menu is new, as well: it has been reorganized to follow the MITRE ATT&CK framework structure. “Seasoned professionals may not use the menu to start up items, using shortcuts such as super key and typing the tool…