Author: HackWatchit

John Strand // So you think you might have a compromised Windows system. If you do, where do you start? How would you review the memory of that system? What are the first 10 commands you’d run to see if it’s actually compromised? This webcast is based on SANS 504, and introduces attendees to some free sample memory dumps and command output of compromised systems. BHIS has spent a fair amount of time creating samples for everyone to play with to sharpen their skills! For more info, the slides and other information visit www.tinyurl.com/504-extra Available live/virtual and on-demand

Google is rolling out new Android Enterprise features aimed at improving mobile security, IT management, and employee productivity. According to Zimperium’s 2025 Global Mobile Threat Report, attackers are now prioritizing mobile devices over desktops. Many security incidents involve smartphones, often due to unsafe apps or unsecured public Wi-Fi. Google’s latest update responds to these risks by adding tighter protections at the device and network levels. Stronger mobile defenses At the heart of the update is Advanced Protection, which brings Google’s strongest security features to enterprise devices. With a single tap, users can enable protections against phishing, malware, scam calls, and…

Inside Stealth Falcon’s Espionage Campaign Using a Microsoft Zero-Day Check Point Research (CPR) identified a previously unknown Windows vulnerability (CVE-2025-33053) being actively exploited in the wild. Following CPR’s responsible disclosure, Microsoft released a patch on its June 10th Patch Tuesday The zero-day was used in a targeted espionage operation likely conducted by Stealth Falcon, a threat group known to target entities in the Middle East and Africa. The attack chain begins with a deceptive internet shortcut (.url file) that silently triggers malware hosted on an attacker-controlled WebDAV server, abusing legitimate Windows tools in the process. The operation deployed a sophisticated…

A large North American grocery wholesale distributor, United Natural Foods Inc. (UNFI), disclosed that it is grappling with the aftermath of a cyberattack that has disrupted portions of its operations and triggered coordinated incident response and containment efforts. While UNFI did not provide specific details regarding the nature of the cyberattack or the threat actor involved, the company confirmed that the intrusion had a material impact on its operations.  The company disclosed the incident in a Form 8-K filing submitted to the U.S. Securities and Exchange Commission (SEC) on Monday, stating that it “became aware of unauthorized activity on certain…

Two years ago, ChatGPT couldn’t even tell you what day it was. These early models were frozen at their training cutoff—brilliant conversationalists who could discuss Shakespeare but not yesterday’s news. Then came web search. Language models could suddenly fact-check themselves and pull current information. But they remained observers, not participants. They could tell you about the world but couldn’t touch it. Today’s agentic AI represents a fundamental shift: we’ve given these systems tools. Take this scenario: you are planning a family vacation to Tokyo. A modern AI agent doesn’t just suggest an itinerary. It watches travel vlogs, cross-references museum hours…

U.S. CISA adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 10, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2025-32433 (CVSS score of 10) Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability  CVE-2024-42009 (CVSS score of 9.3) RoundCube Webmail Cross-Site Scripting Vulnerability  The CVE-2025-32433 flaw is a critical…

In episode 54 of The AI Fix, Graham saves humanity with a CAPTCHA, Mark wonders whether AI can suffer, ChatGPT throws shade at Abba’s Björn Ulvaeus, an AI called Jack ask if you want fries with that, an artist invents AI bird poop, and Eric Schmidt says we should unplug AI when it gets direct access to weapons. Graham finds out what happens when a rag tag team of AIs is given 30 days to raise money for charity, and Mark explores model collapse and Claude Opus 4.0’s weird obsession with a fictional factory-farmed chicken company. All this and much…

Joff Thyer // Editor’s Note:  This is part 3 of a 3 part series.  Part 1 discussed configuring your virtual machine engine and virtual hardware emulation.  Part 2 covered installing Android for the emulator, and this part covers installing the drozer attack framework. Once your emulator is up and running, it is now time to have some sideloading fun. The folks at MWR labs have created an awesome Android attack framework called “drozer”. The framework consists of software that needs to be installed on Ubuntu, as well as an “APK” file that needs to be sideloaded onto your emulated Android. First,…

, I wrote an article about the theory (and some applications!) of density estimation, and how it is a powerful tool for a variety of methods in statistical analysis. By overwhelmingly popular demand, I thought it may be interesting to use density estimation to derive some insight on some interesting data — in this case, data related to legal theory. Constructive criticism Although it’s great to dive deep into the mathematical details behind the statistical methods to form a solid understanding behind the algorithm, at the end of the day we want to use these tools to derive cool insights from data!…