Author: HackWatchit

If you’re looking to improve your privacy on your iPhone or iPad, you may find yourself considering a VPN or the Tor network. Unfortunately, things get a little tricky when it comes to iOS, regardless of whether you’re only using Tor or combining it with a VPN. Apple’s iOS operating system has some limitations that can make true anonymity more difficult to achieve. In particular, the use of WebKit, Apple’s proprietary browser engine, is one of the biggest hurdles privacy-seeking iOS users are likely to face. In this post, we’ll explore the issues of using a VPN and Tor on…

Carrie Roberts* // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. I have added resource file and autorun functionality to PowerShell Empire. Empire now has the ability to run multiple commands at once by specifying the commands in a resource file. You can use this feature to automate the startup of your listeners and perform other tasks. In addition, you…

In episode 52 of The AI Fix, our hosts watch a non-existent musical about garlic bread, Graham shares a summer reading list of books that don’t exist, Mark feels nauseous after watching a video of Sam Altman and Jony Ive waffling about products that don’t exist, some non-existent robots stack empty crates in a factory that doesn’t exist, and OpenAI releases Codex, an AI agent destined to make your software engineering job not exist. Graham reveals how an AI called “Thy” has ruined his childhood dream of becoming a late night radio DJ, and Mark looks at an experiment that…

Vulnerabilities in open source software developed and used in-house by NASA could be exploited to breach their systems, claims Leon Juranić, security researcher and founder of cybersecurity startup ThreatLeap. The vulnerabilities Juranić, whose AppSec credentials include founding and leading DefenseCode, is no stranger NASA: in 2009, he discovered and reported a number of serious vulnerabilities in NASA’s Common Data Format (CDF) software library, which ended up getting fixed by the developers. His latest probing of NASA-developed open source software was limited to 4 hours of manual code analysis, but nevertheless unveiled a slew of vulnerabilities. He discovered a stack-based buffer…

Russia-linked APT Laundry Bear linked to 2024 Dutch Police attack Pierluigi Paganini May 27, 2025 A new Russia-linked APT group, tracked as Laundry Bear, has been linked to a Dutch police security breach in September 2024. Netherlands General Intelligence and Security Service (AIVD) and the Netherlands Defence Intelligence and Security Service (MIVD) have linked a previously undetected Russia-linked group, tracked Laundry Bear (aka Void Blizzard), to a 2024 police breach. In October 2024, the Dutch police blamed a state actor for the recent data breach that exposed officers’ contact details, the justice minister told lawmakers. The incident took place on…

Global sportswear giant Adidas has confirmed that it has fallen victim to a cyber attack, with customer data stolen in the incident. The company revealed that personal details, including contact information and account credentials, were accessed by threat actors. While Adidas has not disclosed the exact number of affected customers, users should still reset their passwords and monitor their accounts closely. Adidas has also not confirmed whether the breach resulted from phishing, system vulnerabilities, or third-party compromise. But it puts the company among the growing list of major retailers hit by cyberattacks because of the rise of attack techniques, including…

neural networks, we often juggle two competing objectives. For example, maximizing predictive performance while also meeting a secondary goal like fairness, interpretability, or energy efficiency. The default approach is usually to fold the secondary objective into the loss function as a weighted regularization term. This one-size-fits-all loss might be simple to implement, but it isn’t always ideal. In fact, research has shown that just adding a regularization term can overlook complex interdependencies between objectives and lead to suboptimal trade-offs. Enter bilevel optimization, a strategy that treats the problem as two linked sub-problems (a leader and a follower) instead of a single blended objective. In this post, we’ll explore why…

Lidia Giuliano//* The endpoint protection space is a hot market. With statistics showing malware creation ranging from 300,000 to a million pieces a day, traditional signatures just can’t keep up. As corporations look into strengthening their endpoint defenses, focus on actual business problems can often be clouded and confused by marketing hype. Join special guest Lidia Giuliano as she talks about addressing the testing challenges corporations face and strategies that can be used to help in the decision-making process. Lidia Giuliano has 15 years of experience in Information Security. She has a strong interest in vulnerability management, data security and…

More than 40,000 new vulnerabilities (CVEs) were published in 2024 alone. More than 60% of those were labeled “high” or “critical.” Sounds scary, sure, but how many of them actually put your environment at risk? Not nearly as many as you might think. Scoring systems like CVSS flag severity based on technical factors. But they don’t know your network, your controls, or how you’ve hardened key assets. That’s a problem. Because without context, teams spend too much time chasing scary-looking bugs that may already be blocked, and miss the quiet ones that aren’t. This post breaks down why traditional vulnerability…