Author: HackWatchit
Skybox Is Gone. The Risk of Waiting Isn’t. Skybox is gone, but your compliance deadlines, audit obligations, and security risks are very much alive. Here’s why EMEA organisations must act now, and how FireMon helps make the move fast, secure, and future-ready. When Skybox shut down operations, it didn’t just end a product lifecycle, it left hundreds of organisations across EMEA stranded mid-journey. Security policy management tools aren’t just “nice to have.” They’re foundational to compliance, visibility, and risk control. And for those who relied on Skybox, time is no longer a luxury. You’re not just missing support. You’re missing…
Jordan Drysdale, victim // Kent Ickler, adversary // In this post, our victim locks their computer and heads out for a coffee refill. The adversary smashes through all system and user defenses. http://gph.is/2omMyIb With the system locked and the user not defending her PC/Laptop/MacBook, the adversary has Kon-Boot 2-in-1 installed on a USB drive, plugs it in and reboots. http://www.piotrbania.com/all/kon-boot/ http://gph.is/2ooOPnW Kon-Boot is as simple as a BIOS boot to a thumb drive. The installer is also dead simple and takes about 30 seconds from scratch to weaponized thumb drive. The adversary runs through BIOS options and chooses to boot…
systems powered by large language models (LLMs), are rapidly reshaping how we build software and solve problems. Once confined to narrow chatbot use cases or for content generation, they are now orchestrating tools, reasoning over structured data, and automating workflows across domains like customer support, software engineering, financial analysis, and scientific research. From research to industry applications, AI Agents and multi-agent collaboration have shown not only a lot of potential by a house-power that can automate and accelerate productivity while simplifying many day-to-day tasks. Recent work in multi-agent collaboration (AutoGPT, LangGraph), tool-augmented reasoning (ReAct, Toolformer), and structured prompting (Pydantic-AI, Guardrails)…
Perplexity expects to keep growing at its current pace, with gains driven by its upcoming browser and consumers’ weariness with “legacy browsers” like Google’s Chrome, Perplexity CEO Aravind Srinivas said Thursday (June 5). The artificial intelligence (AI) startup is handling 780 million queries per month, and that figure is growing over 20% month over month, Srinivas said during an interview conducted at the Bloomberg Tech conference in San Francisco and shared in a video by Bloomberg. Perplexity recorded those figures in May, Srinivas said. If the company can sustain this growth rate, it will be doing a billion queries a…
Google’s AI advancement is not slowing down, and we might be getting yet another powerful model codenamed “Gemini Kingfall.” As spotted by users on X, Gemini Kingfall briefly appeared on AI Studio for approximately 20 minutes before it was taken down. Gemini Kingfall While the details aren’t available, Gemini Kingfall doesn’t appear to be an update to the existing Gemini 2.5-Pro. Instead, it could be a new model, and early testing shows it could be a beast in coding. Minecraft page created using Gemini Kingfall model For example, a Redditor used a three-line prompt to create a working single HTML file…
U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 05, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Google Chromium V8 vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Google Chromium V8 Out-of-Bounds Read and Write Vulnerability, tracked as CVE-2025-5419, to its Known Exploited Vulnerabilities (KEV) catalog. This week, Google released out-of-band updates to address three vulnerabilities in its Chrome browser, including the vulnerability CVE-2025-5419, which is actively exploited in the wild. The vulnerability is an out-of-bounds read and write in the V8 JavaScript engine…
Honeywell disclosed that 1,929 ransomware attacks were publicly documented, with 71 percent of attacks occurring in eight verticals, with manufacturing, construction, healthcare, and technology companies seeing the most impact. The Community Intelligence report noted that ransomware attacks tend to be more opportunistic, typically creating a normal distribution of attacks across different industries. That said, attacks on agriculture and food production organizations are exponentially increasing. During the fourth quarter, Honeywell documented in its Community Intelligence report that the most targeted victim industries were construction and manufacturing, each accounting for 21 percent of incidents. The technology and healthcare sectors followed, each comprising…
Brian Fehrman // Someone recently posed a question to BHIS about creating C2 channels in environments where heavily restrictive egress filtering is being utilized. Testers at BHIS, and in the industry as a whole, routinely run into this type of scenario. BHIS strongly encourages the use of egress filtering. As with many other security approaches, however, it is important to realize that this is just one piece of the overall security puzzle. There are multiple ways to get around heavy egress-filtering (thanks to Beau for the links and insights in this section). In some cases, tools such as ICMPSploit [1]…
Cybersecurity experts warn of widespread data exposure as a recent investigation reveals a staggering number of internet cookies circulating on the dark web. A new report from NordVPN highlights the severe privacy risks associated with web cookies, which are small files websites store on your device to remember your browsing activity. The research, conducted in partnership with threat exposure management platform, NordStellar, uncovered approximately 93.7 billion stolen cookies available for sale in underground online marketplaces. Researchers analyzed data from Telegram channels between April 23 and April 30, 2025, resulting in a dataset of around 94 billion cookies. The researchers analyzed…