Author: HackWatchit

The ASUS DriverHub driver management utility was vulnerable to a critical remote code execution flaw that allowed malicious sites to execute commands on devices with the software installed. The flaw was discovered by an independent cybersecurity researcher from New Zealand named Paul (aka “MrBruh”), who found that the software had poor validation of commands sent to the DriverHub background service. This allowed the researcher to create an exploit chain utilizing flaws tracked as CVE-2025-3462 and CVE-2025-3463 that, when combined, achieve origin bypass and trigger remote code execution on the target. The DriverHub problem DriverHub is ASUS’s official driver management tool that…

New cybersecurity law updates may be on the way The Cybersecurity Information Sharing Act of 2015 expires this September. Michele Sandiford May 12, 2025 3:57 pm < a min read The House Permanent Select Committee on Intelligence is considering updates to a key cybersecurity law. The Cybersecurity Information Sharing Act of 2015 expires this September. The intelligence committee last week received briefings from multiple agencies on how the law has worked out so far. The statute incentivizes private industry to share cyber threat data with the government. But Intelligence Committee Chairman Rick Crawford said the law needs to be updated…

Scott Worden* // So you and your company had a pen test…now what? What to do, how to plan, and good SQUIRREL! ways to stay on track.   The 3 Stage of the Penetration Test Having the penetration tester reach your crown jewels, get root, own you, pwn you, own3d, 0wn3d, pwned, pooned or whatever phrasing you use is NOT a failure. The point of a penetration test is to find where you are vulnerable so you can improve. There is no failing a pen test, with two exceptions. If you artificially insert preventions or react differently to the pen…

In just a few short years, the breakneck speed of advancements in AI have transformed nearly every industry, including cyber security. The pace of acceleration has forced IT and business leaders to rethink approaches to some of the most sensitive areas of their business operations, including workload management, innovation and DevOps, workplace mobility, and security. Understanding how to plan and optimize for the continued evolution of AI and cloud deployments—as well as how to incorporate Agentic AI into cyber defenses and protect against malicious use—is now mission-critical for every modern business. Securing this new and shifting IT estate is a…

U.S. CISA adds TeleMessage TM SGNL to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 12, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds TeleMessage TM SGNL flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a TeleMessage TM SGNL flaw, tracked as CVE-2025-47729 (CVSS score of 1.9), to its Known Exploited Vulnerabilities (KEV) catalog. “The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage “End-to-End encryption from the mobile phone through to the corporate…

US and Dutch law enforcement, with the help of Lumen researchers, have disrupted 5socks and Anyproxy, two proxy-for-rent services that were used by criminals for ad fraud and DDoS and brute-force attacks (among other things). The domain seizure notice The US Department of Justice has also unsealed an indictment against tree Russian and one Kazakhstani national, who allegedly maintained, operated, and profited from the two services. “The 5socks.net website advertised more than 7,000 proxies for sale worldwide, including in the United States. Users paid a monthly subscription fee, ranging from $9.95 to $110 per month. The website’s slogan, ‘Working since…

In brief New York Mayor Eric Adams announced the city’s first official crypto summit on Monday. Adams reaffirmed his goal to make New York “the crypto capital of the globe.” Adams said New York City rivals California’s Silicon Valley in blockchain technology and innovation. New York Mayor Eric Adams announced the city’s first official crypto summit on Monday, while reaffirming his goal to make New York “the crypto capital of the globe.”New York will host a major crypto summit on May 20, just two months after former U.S. President Donald Trump held a similar event at the White House.At a…

Across private conversations with CISOs, CIOs, and heads of HR and identity, one issue continues to emerge as both urgent and unresolved: fake IT workers infiltrating enterprise environments under false or stolen identities. In many of these discussions, leaders admitted they’ve seen this problem up close, or know someone who has. Fake hires can linger undetected for months, perform well enough to avoid scrutiny, and quietly gain access to sensitive systems. Whether the goal is financial fraud, IP theft, or funding a foreign regime, the result is always dangerous: critical systems are compromised, trust is shattered, and the organization is left exposed.…

Jordan Drysdale//* In this blog, we are assuming that we have obtained an access key, a secret key and maybe a .pem key from a network user who left these things lying around. What services do they have access to? How far can we get? Here we stand again, on the shoulders of giants with the prospect of using their efforts to take advantage of someone else’s mistake. In this case, that giant is Carnal0wnage. His effort, the WeirdAAL (https://github.com/carnal0wnage/weirdAAL) toolkit, is another brilliant piece of work designed to audit the privileges belonging to a stolen set of AWS keys.…