Author: HackWatchit

As the manufacturing sector increasingly adopts digital transformation, cybersecurity has become a core requirement, not just for protecting assets but for ensuring continuity, resilience, and long-term competitiveness. These themes took center stage at the inaugural Industrial Cyber Days Manufacturing 2025 online event, where cybersecurity leaders from global manufacturers, technology providers, and regulatory bodies gathered to discuss the evolving landscape of manufacturing cybersecurity strategies. Industrial Cyber Days Manufacturing 2025 was held virtually across three regions, starting with the Americas on May 13, EMEA on May 20, and APAC on June 3. Designed by practitioners, for practitioners, the event brought together the…

Ransomware, trojans, and malware delivered through USB devices are putting growing pressure on industrial systems, according to the Honeywell 2025 Cyber Threat Report, which draws on data from monitoring tools deployed across industrial sites around the world. The findings highlight persistent and serious risks to OT environments that keep critical infrastructure running. Findings from the Honeywell Advanced Monitoring and Incident Response (AMIR) service The numbers aren’t great Researchers recorded a 46 percent increase in ransomware extortion cases in late 2024 and early 2025. The Cl0p ransomware group was especially active. In just the first quarter of 2025, Honeywell tracked 2,472…

Ethereum’s “Pectra” network upgrade has successfully completed its mainnet launch. The update merges the Prague execution layer and the Electra consensus layer, delivering a suite of network protocol improvements, including enhancing layer 2 scaling, smart wallet functionality, improving UX, and overall efficiency of the Ethereum network.  Bitcoin’s dominance has risen to a 4-year-high, commanding over 64% of the total crypto market capitalization, whilst altcoins continue their struggle for any meaningful and sustained market momentum. The “Pectra” Upgrade arrives at a make-or-break moment for Ethereum as fast-rising networks like Solana continue to close ground on the world’s second-largest cryptocurrency. \Image credit: CoinMarketCap…

Jordan Drysdale // The Wi-Fi travel kit part one was popular enough that, back by demand, here are the specific parts, part numbers and links. Pretty much everything on the list in the original post is available at the Hak5  team’s shop. Sure, Amazon is like 2% cheaper and Prime shipping is hard to argue with, but we definitely like to support these folks: https://hakshop.com/collections/wireless-gear Wi-Fi Pineapple: https://hakshop.com/products/wifi-pineapple?variant=81044992 Alfa adapter (2.4 only): https://hakshop.com/collections/wireless-gear/products/alfa-usb-wifi-awus036neh TP-Link adapter also make the cut in a wireless travel kit: http://hackerwarehouse.com/product/tp-link-tl-wn722n/ This next item is worth discussing for a brief moment. The signal intensity on this bad boy can allow you to easily…

And what does it tell us about Cybersecurity? As the founding CEO of StackStorm and now DeepTempo, I’ve seen how the needs of CISOs and SOCs have changed over the last 10+ years. New challenges and a better color scheme! When we started StackStorm, the cybersecurity landscape was different. Our power users rarely asked for more alerts — rather, they just wanted context and to handle the alerts they received in a better manner. Signatures, rules, and predefined playbooks formed the cornerstone of defense. Incidentally — a little bit about StackStorm. Think of it as a SOAR that is more broadly applicable than only security. In fact…

Why Can’t Our AI Agents Just Get Along? What Exactly Is Agent2Agent (A2A)? How Does A2A Work Under the Hood? A2A vs. MCP: Tools vs. Teammates A2A vs. Existing Agent Orchestration Frameworks A Hands-On Example: The “Hello World” of Agent2Agent Getting Started with A2A in Your Projects Conclusion: Towards a More Connected AI Future References Why Can’t Our AI Agents Just Get Along? Imagine you’ve hired a team of super-smart AI assistants. One is great at data analysis, another writes eloquent reports, and a third handles your calendar. Individually, they’re brilliant. But here’s the rub: they don’t speak the same…

Two malicious packages have been discovered in the npm JavaScript package index, which masquerades as useful utilities but, in reality, are destructive data wipers that delete entire application directories. The data wiper packages are ‘express-api-sync’ and ‘system-health-sync-api,’ and pose as database syncing and system health monitoring Ttools. According to open-source software security firm Socket, they both contain backdoors that enable remote data-wiping actions at the infected host. The packages were published on npm in May 2025 and have been removed from npm following their reporting by Socket. The firm’s historic stats show that express-api-sync was downloaded by unsuspecting developers 855…

Carrie Roberts // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. Unauthenticated Remote Code Execution? A hacker’s best friend. And that is what we have with CVE-2017-5638 Apache Struts with working exploit code here: https://github.com/rapid7/metasploit-framework/issues/8064 Save the exploit code to a file and execute with Python passing two command line arguments. The first command line argument is the URL to…

All of that would represent a serious threat to national security. Except that, strangely, Apple flatly denies it happened. “We strongly disagree with the claims of a targeted attack against our users,” Apple’s head of security engineering, Ivan Krstić, wrote in a statement to WIRED. Apple has patched the issue that iVerify highlighted in its report, which caused iPhones to crash in certain cases when a message sender changed their own nickname and avatar. But it calls those crashes the result of a “conventional software bug,” not evidence of a targeted exploitation. (That blanket denial certainly isn’t Apple’s usual response…