Author: HackWatchit

If you 3D print a frame of a Glock-style pistol, then you can buy the rest of the parts off the internet and assemble it, and you have a gun that is a ghost gun. An anonymous, fully private, lethal weapon.Zoë Schiffer: When we get back, we’ll get into the details of how Andy actually made and assembled the ghost gun. But for now, we have to go to break.Welcome back to Uncanny Valley. Okay, Andy, I want to get into the gun assembly process. Talk to me about the point from printing, to ordering the parts, to actually putting…

In today’s mobile-first world, where 75% of employees access sensitive corporate data through their smartphones, securing the mobile attack surface has become a critical priority for organizations. The challenge is distinguishing marketing claims from actual security performance. This is why we’re proud to announce that Check Point Harmony Mobile has been recognized as the industry leader in Miercom’s comprehensive 2025 Mobile Threat Defense (MTD) assessment, earning the prestigious Miercom Certified Secure award. Independent Validation Through Rigorous Testing Miercom, known for their thorough, hands-on testing methodologies, evaluated leading MTD vendors through real-world attack simulations across 12 critical security categories. The results?…

The EC-Council has earned official reaccreditation from the U.K.’s National Cyber Security Centre (NCSC), a validation of its ongoing commitment to excellence. Five of EC-Council’s flagship certifications Certified Ethical Hacker (CEH), Certified Chief Information Security Officer (CCISO), Certified Penetration Testing Professional (CPENT), Certified Network Defender (CND), and Network Defense Essentials (NDE) have been reaffirmed by the NCSC as meeting the U.K. government’s rigorous standards for cyber defense training. This recognition confirms that EC-Council’s programs are academically rigorous and practical, as well as aligned with the demands of today’s real-world threat environment. The NCSC, part of the UK Government’s GCHQ, is…

John Strand// In this webcast, John walks through a couple of cool things we’ve found useful in some recent network hunt teams. He also shares some of our techniques and tools (like RITA) that we use all the time to work through massive amounts of data. There are lots of awesome websites that can greatly increase the effectiveness of your in-network threat hunting. For those interested, after the webcast, we show off our new commercial threat hunting tool, AI Hunter. We are currently looking for Beta testers who have span ports ready to fire and possibly are already using Bro. The…

In brief Kraken will offer so-called xStocks to overseas customers on Solana. The initiative is being facilitated through a partnership with tokenization firm Backed. The product is aimed at offering investors better access to U.S.-listed stocks globally. Kraken will soon offer overseas customers the ability to trade U.S.-listed stocks through the crypto exchange’s platform, the company said in a press release on Thursday.The offering, which covers more than 50 U.S.-listed stocks and exchange-traded funds, will be facilitated through a partnership with Backed, a firm specializing in tokenized securities, using the Solana blockchain to offer so-called xStocks, the company said.Tokenization refers…

New Signal update stops Windows from capturing user chats Pierluigi Paganini May 22, 2025 Signal implements new screen security on Windows 11, blocking screenshots by default to protect user privacy from Microsoft’s Recall feature. A Signal update for the Windows app prevents the system from capturing screenshots by default. The feature protects users’ privacy from Microsoft’s Recall feature. “Signal Desktop now includes support for a new “Screen security” setting that is designed to help prevent your own computer from capturing screenshots of your Signal chats on Windows. This setting is automatically enabled by default in Signal Desktop on Windows 11.”…

A privilege escalation vulnerability in Windows Server 2025 can be used by attackers to compromise any user in Active Directory (AD), including Domain Admins. “The [“BadSuccessor”] attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement,” Akamai researcher Yuval Gordon warned. BadSuccessor attack technique explained The exploitable feature was introduced to help organizations replace the legacy non-managed service accounts used by applications and systems with more secure delegated Managed Service Accounts. The migration process couples a legacy account and a dMSA and makes the…

Lumma Stealer over more than two years grew into the go-to information-stealing malware for hundreds of threat actors looking to launch everything from ransomware attacks to phishing to malvertising.The info-stealer, which was distributed via a malware-as-a-service (MaaS) operation, was used to harvest credentials like passwords and financial and personal data such bank accounts, credit card numbers, and cryptocurrency wallets, which was then sold through an underground marketplace. Microsoft over the past two months found 394,000 Windows systems worldwide were infected with Lumma – also known as LummaC2 – malware.In an operation involving U.S. and international law enforcement agencies like Europol,…

The US Department of Justice (DOJ) has turned up the heat on a multi-national cryptocurrency fraud ring that allegedly swindled over a quarter of a billion dollars from victims worldwide.The charges, filed under the Racketeer Influenced and Corrupt Organizations Act (RICO), bring the total number of defendants in the case to 27.At the centre of the investigation is 20-year-old Malone Lam, accused of orchestrating one of the largest individual cryptocurrency thefts in U.S. history – allegedly stealing over 4,100 Bitcoin (worth approximately US $230 million) from a single victim in Washington, DC.As we described last year, Lam – who operated…