Author: HackWatchit

Jordan Drysdale // This is a super quick write-up on the first very useful payload we tested and confirmed as 100% reliable on all Windows systems (XP-SP3+) with PowerShell enabled. Bash Bunny Wiki: http://wiki.bashbunny.com/#!index.md Payload: https://github.com/hak5/bashbunny-payloads/tree/master/payloads/library/usb_exfiltrator The most important piece is an understanding of the exceptionally simple switch positioning and directory structure.  We downloaded the entirety of the current payloads from the Bunny’s git here: https://github.com/hak5/bashbunny-payloads The only edits we made to the USB_Exfil payload before copying it over to the switch1 directory was to remove the .PDF reference. This allowed us to pull sub-directories inside the user’s documents directory. Be…

Patient data is often stored or processed outside the country where it was collected. When that happens, the data falls under the laws of the country where it resides. Depending on those laws, local governments may have legal access to that data. For healthcare organizations and CISOs, knowing where data lives and who controls it is key to keeping it safe. The flow of medical data through foreign infrastructure Despite growing national security concerns and government restrictions, Chinese military-linked companies remain deeply embedded in the U.S. digital supply chain, according to Bitsight. Smart Meter warned healthcare providers and the public…

Cybersecurity vendor Forescout Technologies announced on Thursday a partnership with Coalfire to accelerate the FedRAMP Authorization to Operate (ATO) processes for Forescout Cloud Services. The Coalfire collaboration builds on Forescout’s 20-year track record of providing cost-effective security solutions for U.S. federal civilian and DEpartment of Defense (DoD) agencies to support them in modernizing their cybersecurity posture in line with the Federal Zero Trust Strategy, including the DoD’s device requirements and evolving cloud security mandates. Forescout Cloud delivers scalable, intelligent, and integrated cybersecurity for all connected edge devices, as well as IT, Operational Technology (OT), and Internet of Things (IoT). Leveraging…

Experts found 4 billion user records online, the largest known leak of Chinese personal data from a single source Pierluigi Paganini June 07, 2025 Over 4 billion user records were found exposed online in a massive breach, possibly linked to the surveillance of Chinese citizens. Cybersecurity researcher Bob Dyachenko and the Cybernews team discovered a massive data leak in China that exposed billions of documents, including financial, WeChat, and Alipay data, likely affecting hundreds of millions. Researchers speculate data was collected to build detailed profiles of Chinese citizens, with little that users can do to protect their privacy. The researchers…

are notoriously difficult to design and implement. Despite the hype and the flood of new frameworks, especially in the generative AI space, turning these projects into real, tangible value remains a serious challenge in enterpriss. Everyone’s excited about AI: boards want it, execs pitch it, and devs love the technology. But here’s the very hard truth: AI projects don’t just fail like traditional IT projects, they fail worse. Why? Because they inherit all the messiness of regular software projects plus a layer of probabilistic uncertainty that most orgs aren’t ready to handle. When you run an AI process, there’s a certain level of randomness involved,…

John Strand // It’s odd, we try to push security forward through standards like NIST, the Critical Controls, and PCI, but most organizations strive to meet the bare minimum required by those standards. It almost seems that the standards we create become counterproductive to actual good security. We have seen a couple of trends which seem to be changing that. First, Ransomware is something organizations must face in a visceral and immediate way. Because of this, we are seeing a huge movement in companies to improve their security – not just meet the minimum requirements. Secondly, we have a push…

In brief Wandercraft, the French company known for its medical exoskeletons, has entered the field of humanoid robotics. Built in just 40 days using the same core technology as its exosuits, Wandercraft said Calvin 40 is already being tested in industrial environments. The robot omits humanlike features including a head and hands, and focuses on practical, hazardous tasks that are difficult or dangerous for human workers. After capturing global attention at the 2024 Olympics, where its exoskeleton helped a paraplegic man walk, Paris-based Wandercraft is now shifting its focus from wearable robotics to fully autonomous humanoid robots.Wandercraft’s new humanoid robot,…

Trump revokes digital identity actions in new cyber executive order While Trump’s new EO eliminates several digital identity directives, it maintains other aspects of the Biden administration’s cybersecurity agenda. Justin Doubleday@jdoubledayWFED June 6, 2025 6:56 pm 3 min read President Donald Trump has signed a new cybersecurity executive order that continues many of the policies of his predecessors, while also marking out some key changes in the approach to software security, digital identity and more. The new executive order, “Sustaining Select Efforts to Strengthen the Nation’s Cybersecurity,” modifies many aspects of a cyber EO signed by President Joe Biden in…

A new data wiper malware named ‘PathWiper’ is being used in targeted attacks against critical infrastructure in Ukraine, aimed at disrupting operations in the country. The payload was deployed through a legitimate endpoint administration tool, indicating that attackers had achieved administrative access to the system through a prior compromise. Cisco Talos researchers who discovered the attack attributed it with high confidence to a Russia-linked advanced persistent threat (APT). The researchers compare PathWiper to HermeticWiper, previously deployed in Ukraine by the ‘Sandworm’ threat group, which had similar functionality. Hence, PathWiper may be an evolution of HermeticWiper, used in attacks by the…