Author: HackWatchit

RPC (Remote Procedure Call) nodes are the API gateways through which decentralized applications (dApps) send transactions and query blockchain state. In Polygon (an Ethereum-compatible “layer-2”), an RPC endpoint exposes the standard JSON-RPC interface for the Polygon PoS chain. In practice, developers can either use a public/shared RPC endpoint provided by services like Alchemy, Infura, QuickNode, etc., or run their own full Polygon node (“custom RPC”) on dedicated hardware. Each approach has trade-offs: shared endpoints are easy and cheap to start, while custom nodes offer maximum speed, reliability, and trustworthiness at a higher cost. This article dives into that choice in…

Why Does NHI Management Matter in Today’s Cybersecurity Landscape? Data breaches, hacking and cyber threats are at an all-time high, making cybersecurity a crucial priority for businesses. So, how can organizations effectively secure their digital assets and eliminate potential risks? The answer lies in smart NHI strategies and efficient deployment. But what does this mean, and why does it matter? Non-Human Identities (NHIs) are pivotal in cybersecurity- they provide the backbone for machine-to-machine communication and interact with your sensitive data. Failure to properly manage and secure these NHIs can lead to increased vulnerability and significant security breaches. Understanding the Strategic…

Private LTE networks are quietly reshaping how critical infrastructure sectors manage communications, operations, and resilience. As organizations shift away from public networks in favor of greater control, they aren’t eliminating risk – they’re assuming ownership of it. That shift presents new opportunities, but it also demands a new level of responsibility. The same vulnerabilities that have exposed traditional telecom networks to cyberattacks – including the high-profile Salt Typhoon operation – are already finding footholds in private LTE environments. Securing these networks not only helps limit exposure to external threats, but also addresses the inherent risks of owning and operating a…

In light of recent cyber attacks targeting major British businesses such as Harrods, Marks & Spencer, and Co-Op, the National Cyber Security Centre (NCSC), the cybersecurity division of GCHQ, has issued an urgent warning to UK firms. The warning highlights the increasing risk of ransomware attacks, particularly in the retail sector, and anticipates that similar attacks are likely to escalate in the coming days. In response, the NCSC has published a comprehensive set of guidelines to help businesses defend against these threats and minimize potential financial losses should an attack occur. Anticipating More Cyber Attacks As digital threats continue to…

Overview: Check Point researchers have identified a new phishing campaign that exploits Microsoft’s “Dynamics 365 Customer Voice,” a customer relationship management software product. It’s often used to record customer calls, monitor customer reviews, share surveys and track feedback. Microsoft 365 is used by over 2 million organizations worldwide. At least 500,000 organizations use Dynamics 365 Customer Voice, including 97% of Fortune 500 companies.In this campaign, cyber criminals send business files and invoices from compromised accounts, and include fake Dynamics 365 Customer Voice links. The email configuration looks legitimate and easily tricks email recipients into taking the bait. As part of…

In the Black Hat Asia 2025 NOC, Shaun staffed the morning shifts, and Aditya the afternoon shifts as usual. Unlike the earlier years, both hunters had plenty of rabbit holes to down into leading to a place of “involved joy” for both. Activities involving malware what would be blocked on a corporate network must be allowed, within the confines of Black Hat Code of Conduct. Fishing With Malware: Who Caught the Fish? It all started with unusual network activity originating from a device in a lab class. Doesn’t it always? “Look beyond the endpoint.”A saying that comes to life daily…

John Strand// In this webcast we cover some of the core tools we use all the time at Black Hills Information Security. However, there’s a twist. We don’t talk about Nessus, Nmap, or Metasploit. Why? Because there are a ton of new (and older) tools we use that fall outside of the standard tools you see in every security book/blog out there.   Slides available here: https://blackhillsinformationsecurity.shootproof.com/gallery/8393821/ Available live/virtual and on-demand

article uses concepts from this brilliant paper. For a deeper understanding of the mathematics please refer to the paper. Here we try to present the math in a more intuitive and explicit way, with some important nuances highlighted. 1 Introduction Discussions about Backpropagation often say we use the ‘chain rule’ to derive the gradient wrt the weights and then go on to present a formula like so: \(\frac{dy}{dx} = \frac{dy}{dt} \frac{dt}{dx}\). This is the single-variable chain rule and if we used it to calculate the loss wrt the gradients of each layer our calculations would be wrong. This misrepresentation confuses…

Hackers are exploiting an unauthenticated remote code execution (RCE) vulnerability in the Samsung MagicINFO 9 Server to hijack devices and deploy malware. Samsung MagicINFO Server is a centralized content management system (CMS) used to remotely manage and control digital signage displays made by Samsung. It is used by retail stores, airports, hospitals, corporate buildings, and restaurants, where there’s a need to schedule, distribute, display, and monitor multimedia content. The server component features a file upload functionality intended for updating display content, but hackers are abusing it to upload malicious code. The flaw, tracked under CVE-2024-7399, was first publicly disclosed in…