Author: HackWatchit

Jordan Drysdale & Kent Ickler// Jordan and Kent are back with more blue team madness! The shameless duo continue their efforts to wrangle decades old attacks against wireless networks. The webcast will discuss the last 15 years of wireless threats…..in less than five minutes. The other 55 minutes will cover modern defenses, Wi-Fi hardening and how we can shift victory back to the blue team! Want to learn more mad skills from the person who wrote this blog? Check out these classes from Jordan and Kent:

On the 4th of May 2025, TeleMessage, an Israeli company providing modified versions of encrypted messaging apps like Signal, suffered a major data breach. The breach exposed archived messages, contact information of government officials, and backend login credentials. The hacker, whose identity is still unknown, exploited a vulnerability in the company’s system, accessing a publicly exposed Java heap dump file that contained sensitive information. This incident raised serious concerns about the security of communications at the highest levels of the United States government, especially since former National Security Advisor Mike Waltz was seen using TeleMessage’s TM SGNL app during a…

Commvault is extending its Kubernetes protection to support virtual machines (VMs) running on Red Hat OpenShift Virtualization. This new capability enhances cyber resilience for organizations moving to modern application environments. Containerized workload adoption is rapidly growing: Gartner predicts 90% of G2000 companies will use container management tools by 2027, and the Containers as a Service (CaaS) market is forecasted to hit nearly $USD 44B by 2034. This surge makes integrated data protection and recoverability critical. Enterprises must mitigate downtime from ransomware and other disruptions while managing complex data protection across hybrid environments. Using disparate tools for VMs and containers can…

As cyber threats targeting industrial control systems (ICS) grow more advanced, the SANS Institute is rolling out a first-of-its-kind course to train professionals in safely assessing vulnerabilities in operational technology (OT) environments. ICS613: ICS/OT Penetration Testing & Assessments will debut in beta August 25–29 in Sandy, Utah, as an in-person-only offering. The beta run of the course will deliver critical hands-on training for cybersecurity professionals working in industrial environments. Authored by Don C. Weber, Jason Dely, and Tyler Webb, ICS613 equips students with the mindset, methodologies, and tools to perform security assessments in environments where uptime, safety, and reliability are…

US President Donald Trump signed into law legislation on Monday nicknamed the Take It Down Act, which requires platforms to remove nonconsensual instances of “intimate visual depiction” within 48 hours of receiving a request. Companies that take longer or don’t comply at all could be subject to penalties of roughly $50,000 per violation.The law received support from tech firms like Google, Meta, and Microsoft and will go into effect within the next year. Enforcement will be left up to the Federal Trade Commission, which has the power to penalize companies for what it deems unfair and deceptive business practices. Other…

Originally launched as Worldcoin by Tools for Humanity (TfH) six years ago, World Network has been a lightning rod for controversy since the start, particularly among privacy campaigners troubled by its data collection practices.Although the rebranded digital identity project has attempted to stem the tide of opprobrium in recent years, it has not succeeded in silencing critics. And there is probably a good reason for that: World Network’s bid to authenticate human personhood by scanning irises with an orb-shaped device in return for crypto tokens is undeniably creepy.Currently gearing up to launch in the US, yet facing a fragmented regulatory…

Dakota Nelson// For a lot of our customers, their first introduction to pentesting is a vulnerability scan from BHIS. This is after talking to the testers, of course, and setting up rules of engagement, sharing which hosts are within scope, and talking over how we, as testers here at BHIS, can best help secure their environment. But still – this is the first time the rubber meets the road, and it can make people understandably nervous. What is a scan, anyway? Will it crash things? Do we need to run it at night or on a weekend? We field a…

Understanding the Realm of Non-Human Identities in Cloud Security Is your organization fully prepared to confront the new wave of cloud security challenges? If your answer is uncertain or negative, have you considered transforming your cybersecurity strategy to include Non-Human Identities (NHIs) and secrets management? Imagine the NHIs as ‘tourists’ traveling, with ‘passports’ being their unique cryptographic keys or tokens and ‘visas’ being the permissions granted by the servers. This analogy simplifies the complexity of how NHIs operate, protecting sensitive data and ensuring smooth integration of numerous applications under various cloud. To adapt and stay resilient against cyber threats, organizations…

In this Help Net Security interview, Bart Preneel, Full Professor at University of Leuven, unpacks the European Commission’s encryption agenda, urging a balanced, technically informed approach to lawful access that safeguards privacy, security, and fundamental rights across the EU. Given the European Commission’s aim to enable lawful access to encrypted data, how can we reconcile this with the technical consensus that introducing such access points inherently weakens encryption? While “lawful access to encrypted data based on a warrant” sounds very reasonable, this is a very hard problem to crack. Everyone understands how warrants have been used in the past to…