Author: HackWatchit

Hello and welcome, my name is John Strand and in this video, we’re going to be getting started with Wireshark. Now, Wireshark is very similar to TCPDump, in fact, a lot of people actually prefer Wireshark to TCPDump, but I look at them as two completely different utilities. TCPDump is fantastic for creating scripts, going through and doing large packet captures on systems and Wireshark is a lot better at doing analysis of systems using a full GUI interface.   So let’s get started. We’re using the security onion again because the security onion is fantastic for anything with network forensics.…

On June 5, a Pinal County Board of Supervisors meeting was asked to approve a $500,000 contract between the county and Massive Blue in order to license Overwatch.“I was looking at the website for Massive Blue, and it’s a one-pager with no additional information and no links,” Kevin Cavanaugh, the then-supervisor for District 1, said to Pinal County’s Chief Deputy at the Sheriff’s Office, Matthew Thomas. “They produce software that we buy, and it does what? Can you explain that to us?”“I can’t get into great detail because it’s essentially trade secrets, and I don’t want to tip our hand…

Terrance, United States / California, April 22nd, 2025, CyberNewsWire Joining Criminal IP at Booth S-634 | South Expo, Moscone Center | April 28 – May 1, 2025 Criminal IP, the global cybersecurity platform specializing in AI-powered threat intelligence and OSINT-based data analytics, will exhibit at RSAC 2025 Conference, held from April 28 to May 1 at the Moscone Center in San Francisco. The company will welcome attendees at Booth S-634 in the South Expo Hall. Strengthening Its Global Presence Through Proven Success Following its impactful debut at RSAC 2023, Criminal IP has continued to expand its international footprint, establishing partnerships…

Locked token holders have experienced an average drawdown of nearly 50% for their locked positions compared to over-the-counter (OTC) valuations in May 2024.According to data published by STIX founder Taran Sabharwal on April 22, holders could have exited their positions at double the current spot prices the previous year.Sabharwal shared data comparing fully diluted valuation (FDV) estimates from May 2024 against current FDVs as of April 2025 for major tokens, including JITO, BERA, ZRO, WLD, TIA, IO, W, ZK, EIGEN, SCR, and BLAST.Widespread devaluations across top tokensAmong the projects tracked, nearly all showed considerable valuation declines. SCR and BLAST recorded…

Steve Carter discusses the evolution of the vulnerability management market, as well as where vulnerability management has failed and why the next phase has to center around automation and scale. The problem, as Carter sees it, is deceptively simple: Organizations are drowning in vulnerabilities but still can’t prioritize or fix them quickly. Scanners can identify thousands of issues, but the process of getting those vulnerabilities to the right people, assigning ownership, and remediating the risk is almost always manual and inconsistent. The real bottleneck isn’t in detection—it’s in what happens after. Alan and Carter discuss how automation may be the…

Delivering Security Without Complexity in an Era of Sophisticated Cyber Threats Let’s face it—today’s cybersecurity landscape is a battlefield. Ransomware gangs target critical infrastructure, insider threats bypass perimeter defenses, supply chain attacks compromise trusted vendors, APTs remain undetected for months, and zero-day exploits are weaponized rapidly. Organizations relying on disjointed tools are fighting yesterday’s war with outdated weapons. Why Traditional Security Falls Short When I speak with CISOs, the frustrations are familiar: alert overload from siloed tools, delayed threat detection, massive spend with limited visibility, and compliance demands draining resources. These aren’t isolated issues—they reflect a broken approach. Over time,…

54% of tech hiring managers say their companies are likely to conduct layoffs within the next year, and 45% say employees whose roles can be replaced by AI are most likely to be let go, according to a new study by General Assembly. “We’re on the precipice of an unprecedented skills crisis,” said Daniele Grassi, CEO of General Assembly. “Businesses are ramping up AI investments and reducing headcount in the name of productivity, but they are creating a widening skills gap that will ultimately slow transformation. It’s time to get AI skills to every employee.” Key findings from the survey…

An SSL.com vulnerability allowed attackers to issue valid SSL certificates for major domains by exploiting a bug in its email-based domain verification method. Internet security relies on trust, and the Certificate Authority (CA) is a key player in this system as it verifies website identities, and issues SSL/TLS certificates, which encrypt communication between a computer and the website. However, recently, a serious problem was found with one of these trusted CAs, SSL.com. Researchers discovered a flaw in how SSL.com was checking if someone requesting a certificate actually controlled the domain name, a process called Domain Control Validation (DCV). SSL.com enables…

Hello and welcome, my name is John Strand and in this video, we’re going to be talking a little bit about beaconing using RITA. Now, for this particular video, I’m not using the security onion, instead we’re going to be using ADHD. If you want to find ADHD, go to the ActiveCountermeasures.com website. Go to our projects, you’ll see RITA and Passer and a bunch of tools there, and one of the tools is the Active Defense Harbinger Distribution and that’s what I’m going to be using today. Now, the reason why are we using ADHD is a couple of…