Author: HackWatchit

A Look at ENISA’s NIS360 Cyber Risk Quadrant In an increasingly volatile threat landscape, European cybersecurity strategies are being put to the test. The war in Ukraine, heightened geopolitical tensions, and growing state-sponsored cyber operations have underscored the fragility of essential systems. The EU’s collective cyber resilience depends not only on strong individual actors, but on shared capacity across sectors that sustain daily life. ENISA’s 2024 ENISA NIS360 quadrant challenges us to confront a difficult truth: some of Europe’s most critical sectors remain dangerously underprepared for modern cyber threats. The ENISA NIS360 quadrant maps 21 sectors along two axes—cybersecurity maturity…

in my work, I have written countless SQL queries to extract insights from data. It’s always a challenging task because it’s not only important to write efficient queries, but also simple enough to maintain over time. With each new problem comes a new lesson, and recently, I’ve been diving into SQL window functions. These powerful tools are incredibly useful when you need to perform calculations across a set of rows without losing the granularity of individual records.  In this article, I’ll break down SQL window functions step by step. They might seem complex or unintuitive at first, but once you…

Joe Gray* // You may have heard about a new genealogy tool called Family Tree Now. It is a (seemingly) 100% free tool (more on that later) that allows you to enumerate your family tree without having to enter much data (initially) beyond your name. While it can be useful – especially if family reunions are your thing, if you’re doing a school project, or if you’re trying to locate relatives – the issue here is that you are not the only one that may find it useful. As with anything, it can be used as a tool or a weapon. Just…

A Chroma database operated by Russian AI chatbot startup My Jedai was found exposed online, leaking survey responses from over 500 Canva Creators. The exposed data included email addresses, feedback on Canva’s Creator Program, and personal insights into the experiences of designers across more than a dozen countries. The data exposure was discovered by cybersecurity firm UpGuard, which confirmed the database was publicly accessible and lacked authentication. While much of the database stored generic or public data, one particular collection stood out: it contained responses to a detailed survey issued to Canva Creators, a global group of content contributors to…

Over 84,000 Roundcube webmail installations are vulnerable to CVE-2025-49113, a critical remote code execution (RCE) flaw with a public exploit. The flaw, which impacts Roundcube versions 1.1.0 through 1.6.10, spanning over a decade, was patched on June 1, 2025, following its discovery and reporting by security researcher Kirill Firsov. The bug stems from unsanitized $_GET[‘_from’] input, enabling PHP object deserialization and session corruption when session keys begin with an exclamation mark. Shortly after the patch was released, hackers reverse-engineered it to develop a working exploit, which they sold on underground forums. Though the exploitation of CVE-2025-49113 requires authentication, attackers claim…

Ripple’s stablecoin RLUSD expanded its circulating supply by 29% in the week ended June 8, adding $72.5 million and closing at $320.6 million.The movement marks the first time the token’s float crossed the $300 million threshold. Additionally, it represents a sixfold increase since the launch of RLUSD on Dec. 17, 2024.Data from Artemis shows the additional issuance coincided with a 38% increase in weekly transfer volume, which climbed to $648.1 million from $469.7 million seven days earlier. It is close to the weekly transfer volume peak registered between April 21 and 27, when users moved $741 million using RLUSD.Yet, the token…

The identity industry stands at its most transformative moment since the advent of digital authentication. At Identiverse 2025 in Las Vegas, over 3,000 cybersecurity professionals witnessed a paradigm shift where non-human identities now outnumber humans by ratios exceeding 90:1, fundamentally reshaping how we think about access, trust, and security in an AI-driven world. This isn’t just another technological evolution—it’s the emergence of a new digital ecosystem where machines, AI agents, and human identities must coexist securely at unprecedented scale. The implications are staggering. Organizations are grappling with identity sprawl where 60% manage over 21 identities per user, while AI-powered attacks…

Security teams are leaning hard into AI, and fast. A recent survey of 500 senior cybersecurity pros at big U.S. companies found that 86% have ramped up their AI use in the past year. The main reason? They’re trying to keep up with a surge in AI-powered attacks. But even as AI tools help with tasks like threat detection and data analysis, the pressure on security teams is getting worse. Nearly 70% of respondents say AI and other emerging technologies are actually contributing to burnout. The findings come from the 2025 edition of the Voice of SecOps report, based on…

Derek Banks //   ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. As pentesters, it is probably not a surprise that we tend to make fairly heavy use of Kali Linux on a fairly regular basis. The folks at Offensive Security have an amazing selection of options for platforms that can run Kali. One of those platforms is Kali NetHunter which runs on multiple…