Author: HackWatchit

Jordan Drysdale & Kent Ickler // Jordan and Kent demonstrate why there is only ONE correct way to configure your wireless networks. They also talk about the use of a web service called Wigle to profile and identify your target wireless networks, wireless hash crack theory, pre-computation of a hash file for a target SSID and finally, and a live crack demo! Want to learn more mad skills from the person who wrote this blog? Check out these classes from Jordan and Kent:

Ethereum Foundation has released a sweeping update to its treasury management strategy, signaling a more mature, structured approach to capital allocation amid ETH’s growing global influence and rising institutional scrutiny.The new framework, published on June 4, outlines how the foundation will manage reserves, deploy capital in DeFi protocols, and assess privacy standards, while maintaining Ethereum’s ideological commitment to self-sovereignty and neutrality.The policy introduces a formal asset-liability model that ties operational spending to a fixed percentage of the foundation’s treasury and a multi-year reserve runway.It also sets detailed guidelines for ETH sales, stablecoin holdings, and on-chain deployments, marking a notable departure…

Microsoft announced in Berlin today a new European Security Program that promises to bolster cybersecurity for European governments. The program expands to Microsoft’s existing Government Security Program, which is free to all European Union countries, including accession states, European Free Trade Association (EFTA) members, the UK, Monaco, and the Vatican. The tech giant noted that the program primarily aims to thwart attacks from state-backed actors in Russia, Iran, China, and North Korea, who have escalated their operations against the EU. “Microsoft continues to observe persistent threat activity targeting European networks from nation-state actors, with Russian and Chinese activity being particularly…

The collaboration aims to provide Worldpay merchants with a convenient new checkout option for consumers. The partnership is expected to enhance security and convenience in online transactions, according to a Wednesday (June 4) press release. Paze, developed by Early Warning Services, is an online checkout service for banks and credit unions in the United States that allows consumers to pay online using credit and debit cards. Purchases made via Paze use tokenization, which is more secure than traditional manual entry and could potentially lead to higher authorization rates for merchants, the release said. Seamless checkout can increase conversion rates by…

Web and mobile application code protection is a must-have security control. Modern solutions such as application layer firewall help your organisation to keep those assets protected from threats like SQL injection, cross-site scripting and bot-driven attacks. This is where a Web Application Firewall (WAF) comes into the picture. A WAF has the capability of filtering, monitoring and blocking HTTP requests to protect the assets from malicious requests without affecting legitimate users. Considering the importance of WAF, it is essential to configure it properly. Today, in this guide, we will 1talk about the WAF best practices for configuration, management, as well…

In episode 53 of The AI Fix, our hosts suspect the CEO of Duolingo has been kidnapped by an AI, Sergey Brin says AIs work better if you threaten them with physical violence, Graham wonders how you put a collar on a headless robot dog, Mark asks why kickboxing robots wear head guards, and the CEO of Anthropic says AI could wipe out entry-level jobs. Graham asks your favourite AI how it feels about being kidnapped, and Mark explains how an AI tried to save itself by blackmailing the engineer responsible for turning it off. All this and much more…

Hackers have leaked what they claim is AT&T’s database which was reportedly stolen by the ShinyHunters group in April 2024 after they exploited major security flaws in the Snowflake cloud data platform. As seen by the Hackread.com research team, the data was first posted on a well-known Russian cybercrime forum on May 15, 2025. It was re-uploaded on the same forum on June 3, 2025, after which it began circulating among other hackers and forums. The screenshot shows the data now leaked on two cybercrime forums. While hackers claim it contains 70 million customer records, Hackread.com confirms it actually holds…

Google has fixed two Chrome vulnerabilities, including a zero-day flaw (CVE-2025-5419) with an in-the-wild exploit. About CVE-2025-5419 CVE-2025-5419 is a high-severity out of bounds read and write vulnerability in V8, the JavaScript and WebAssembly engine developed by Google for the Chromium and Chrome web browsers. It allows remote attackers to trigger heap corruption via a crafted HTML page. It was reported by Clément Lecigne and Benoît Sevens of Google’s Threat Analysis Group – a specialized team dedicated to protecting Google users, platforms, and the broader internet from targeted and state-sponsored cyber threats – thus it’s highly likely that the vulnerability…

Derek Banks // This post will walk through a technique to remotely run a Kerberoast attack over an established Meterpreter session to an Internet-based Ubuntu 16.04 C2 server and crack the ticket offline using Hashcat. Recently I have had a lot of success with privilege escalation in an Active Directory domain environment using an attack called Kerberoasting.  Tim Medin presented this technique at SANS Hackfest 2014 and since then there have been numerous awesome articles and conference talks on the details of the attack and tools written for different techniques to pull it off (reference links at the bottom of the post).…