Author: HackWatchit

Derrick Rauch and Kent Ickler // (Updated 3/22/2019) First, to see what our build looks like, look here: https://www.blackhillsinfosec.com/build-password-cracker-nvidia-gtx-1080ti-gtx-1070/ What’s next? Time for System Rebuild! First, you need to decide whether you need encryption, LVM, RAID, multipath, network VLANs, or network interface bonding during the installation; if you need to reuse existing partitions on your installation disks. The reason I bring these up is the main Ubuntu image offered does not include these options, so be careful what one you download. Here is the link to the option that will have these: http://cdimage.ubuntu.com/releases/18.04/release/ Installing Ubuntu 18.04 Next, run through the Ubuntu installer…

Agencies are being encouraged to consider post-quantum cryptographic standards in the acquisition process, as part of a multiyear push to secure sensitive data from exploitation. The Cybersecurity and Infrastructure Security Agency, the Office of the National Cyber Director, the National Institute of Standards and Technology, and the National Security Agency are leading post-quantum cryptographic efforts. Garfield Jones, associate chief of strategic technology at CISA, said those lead agencies hosted a call recently with more than 600 federal IT officials to discuss the adoption of post-quantum cryptography. “The awareness part, we’re really pushing it,” Jones said during a May 13 event…

that 80% of data collected, stored and maintained by governments can be associated with geographical locations. Although never empirically proven, it illustrates the importance of location within data. Ever growing data volumes put constraints on systems that handle geospatial data. Common Big Data compute engines, originally designed to scale for textual data, need adaptation to work efficiently with geospatial data — think of geographical indexes, partitioning, and operators. Here, I present and illustrate how to utilize the Microsoft Fabric Spark compute engine, with the natively integrated ESRI GeoAnalytics engine# for geospatial big data processing and analytics. The optional GeoAnalytics capabilities…

The SANS Institute has announced a major expansion of its Cyber Academies, aiming to triple the number of fully funded scholarships by 2026 in response to escalating threats to U.S. infrastructure. This initiative will provide immersive, instructor-led training to 500 individuals annually, equipping them with GIAC certifications and personalized support from student advisers and career services specialists to launch successful careers in cybersecurity. As high-profile threats like Volt Typhoon continue to target U.S. infrastructure, the need for proven, hands-on cyber defenders has never been more urgent. From defending hospitals and utilities to stopping fraud against small businesses, organizations across every…

Tor has announced Oniux, a new command-line tool for routing any Linux application securely through the Tor network for anonymized network connections. Unlike classic methods like torsocks, which rely on user-space tricks, Oniux uses Linux namespaces to create a fully isolated network environment for each application, preventing data leaks even if the app is malicious or misconfigured. Linux namespaces are a kernel feature that allows processes to run in isolated environments, each with its own view of specific system resources like networking, processes, or file mounts. Oniux uses Linux namespaces to isolate apps at the kernel level, so all their…

Introduction Over the last couple of years, advancements in Artificial Intelligence (AI) have driven an exponential increase in the demand for GPU resources and electrical energy, leading to a global scarcity of high-performance GPUs, such as NVIDIA’s flagship chipsets. This scarcity has created a competitive and costly landscape. Organizations with the financial capacity to build their own AI infrastructure pay substantial premiums to maintain operations, while others rely on renting GPU resources from cloud providers, which comes with equally prohibitive and escalating costs. These infrastructures often operate under a “one-size-fits-all” model, in which organizations are forced to pay for AI-supporting…

Sierra Ward // Want to add our podcast to your subscription service? I’m struggling to figure out Apple’s submission process… (queue Apple eye roll here). In the meantime here’s how to subscribe if you want to listen in your iPhone podcast app. I’m still working on getting it properly listed, any suggestions or ideas are welcome! If you use Stitcher you can find us here: https://www.stitcher.com/podcast/black-hills-information-security

U.S. CISA adds a Fortinet flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 15, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Fortinet vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability, tracked as CVE-2025-32756, to its Known Exploited Vulnerabilities (KEV) catalog. This week, Fortinet released security updates to address a critical remote code execution zero-day, tracked as CVE-2025-32756, that was exploited in attacks targeting FortiVoice enterprise phone systems. The vulnerability is a stack-based overflow issue that impacts in FortiVoice, FortiMail, FortiNDR, FortiRecorder and FortiCamera. A…

PentestPad announced a major rollout of new features to its platform, built to transform how modern security teams deliver penetration testing and manage vulnerabilities, clients and deliverables. PentestPad is an all-in-one workspace designed for penetration testing companies, internal security teams, and IT departments. With growing regulatory pressure (ISO 27001, SOC 2, NIS2, etc.) and increased attack surfaces, companies are struggling to maintain transparency, speed, and structure in their testing workflows. PentestPad addresses this head-on. “Security testing workflows are broken, they’re fragmented, manual, and scattered across spreadsheets and tools that don’t talk to each other,” said Luka Šikić, Co-Founder of PentestPad.…