Author: HackWatchit

New research from Forescout Technologies disclosed that in 2024, there was a 71 percent increase in threat actors targeting the manufacturing sector. Between 2024 and the first quarter of 2025, there were 29 active threat actors in manufacturing, with 79 percent of those being cybercriminals, and 45 percent were ransomware gangs. Of these, the most active was RansomHub with 78 victims, including large data thefts.  Forescout’s analysis of the manufacturing threat landscape in 2024 and the first quarter of 2025 revealed several significant trends. One of the most notable findings was an increase in attacker dwell time, indicating that threat…

Cryptojacking campaign relies on DevOps tools Pierluigi Paganini June 03, 2025 A cryptojacking campaign is targeting exposed DevOps servers like Docker and Gitea to secretly mine cryptocurrency. Wiz researchers uncovered a cryptojacking campaign, tracked as JINX-0132, targeting exposed DevOps applications like Nomad, Consul, Docker, Gitea to secretly mine cryptocurrency. Threat actors behind the campaign are exploiting a wide range of known misconfigurations and vulnerabilities to deliver the miner. This campaign is the first publicly known case of attackers exploiting misconfigured Nomad servers in real-world attacks. The group behind it, named JINX-0132, took advantage of this overlooked entry point, much like in a…

In cybersecurity, understanding an adversary’s identity, capabilities, and intent is critical to intelligent cyber defense. Attribution matters. Despite cyber threat intelligence tracking a multitude of threat actors for many decades, accurately attributing malicious activity continues to be difficult. Vendors and researchers often see different parts of the same puzzle — or entirely different puzzles — due to differences in telemetry. Organizations also have different standards and analytic maturity, which results in varying levels of visibility into threat activity and divergent perspectives on what’s being tracked. Cybersecurity leaders, executive teams, and boards increasingly seek clear answers: Who is targeting us? How…

Kent Ickler // The Task Update our in-house password cracking/hashing capabilities Purchase a new cracking machine Update the old cracking system Stay within budget Buy The Things: Total for new password cracking machine$5110 A Few Quick Lessons The CPU cooler doesn’t actually clear the case cover. This was OK because we don’t want to suffocate the GPU’s and I hadn’t planned on placing the cover on the unit anyway.  The case was specifically chosen as it was rack-mount with enough room for the motherboard to fit and properly support the four dual slot GPUs. A CPU cooler more fitting might…

In this Help Net Security interview, William Lyne, Deputy Director of UK’s National Crime Agency, discusses the cybercrime ecosystem and the threats it enables. He explains how cybercrime is becoming more accessible and fragmented. Lyne also talks about key trends, recent disruptions, and collaboration between law enforcement and the private sector. What are the most concerning trends you’re seeing in cybercriminal behaviour today? Cybercrime is a constantly evolving threat, which is supported and enabled by a cybercrime ecosystem of technical capabilities and threat actors. This ecosystem generally results in two high level, connected trends – it lowers the barrier of…

Qualys details CVE-2025-5054 and CVE-2025-4598, critical vulnerabilities affecting Linux crash reporting tools like Apport and systemd-coredump. Learn how to protect your Ubuntu, Red Hat, and Fedora systems. Cybersecurity experts at Qualys have uncovered two significant weaknesses in common Linux operating systems. These information disclosure vulnerabilities, found in software tools called Apport and systemd-coredump, could allow attackers to steal sensitive information like password hashes from affected systems, reveals Qualys’ report shared with Hackread.com. Understanding the Flaws The Qualys Threat Research Unit (TRU) identified these issues as race-condition vulnerabilities. This means an attacker can exploit a brief moment in time when a…

The concept of a meta blockchain, a universal coordinator that merges data from multiple chains into a single, efficient system, isn’t a new one. If blockchains are permissionless and publicly auditable, why can’t we have one ultimate ledger?Recently, the idea came to the surface once more when Solana co-founder Anatoly Yakovenko shared a compelling vision with his 576K X followers. In the big-brain builder’s tweet, he wrote: “There should be a meta blockchain. Post data anywhere, Ethereum, Celestia, Solana, and use a specific rule to merge data from all the chains into a single ordering.” Racking up over 84,000 views and…

Kent Ickler // In my last post, I was building a password cracking rig and updating an older rig with new GPU cards. I struggled during the design process to find a reliable source of information regarding accurate Hashcat benchmarks. As promised I am posting unaltered benchmarks of our default configuration benchmarks. Nothing was done to these GPU cards to overclock them or otherwise alter their factory-delivered abilities. For more information, check out our build blog post here. System 1: 4x Nvidia GTX 1080 TI System 2: 4x Nvidia GTX 1070 (scroll down a bit) _____ System 1: 4x Nvidia GTX…

Even the best-equipped SOC teams bleed time on two fronts: Tier 1 analysts click through false positives all day. Tier 2 analysts correlate logs, pivot across tools and write reports long after business hours. “Tier 1 and Tier 2 is your primary work within a security operations center, so anything you can do to drive efficiency gains is a huge positive,” says Philip Beck, former SOC manager and now D3’s Director of Sales Engineering, in our recent Morpheus AI workshop. Our new whitepaper, “Fully Automate L1 & L2 SOC Ops—This Is How We Do It” explains the architecture behind those…