Author: HackWatchit

In today’s representative democracies, citizens typically have a say only once every few years when electing their leaders. Beyond that, the average person has little to no influence over how their country is run. In an ideal system, people would be able to participate in decision-making in a much more direct way. However, implementing such a system is extremely challenging. Holding frequent referendums is both inconvenient and expensive, especially since the most reliable method still involves paper-based voting.Today, however, thanks to technologies like blockchain and zero-knowledge proofs, it’s the first time we can realistically imagine replacing paper voting with something…

Why is Management of Protected NHIs Essential? Protected Non-Human Identities (NHIs) have become a crucial factor for organizations looking to strengthen their cybersecurity framework. Given the surge in hacking attempts and data breaches, it is pertinent to ask, “How crucial are protected NHIs in ensuring cyber resilience?” Let’s delve deeper into this topic. NHIs, as machine identities used in cybersecurity, are an integral part of any robust security infrastructure. They offer an encrypted identification system coupled with permissions that regulate a system’s access to various resources. In essence, these identities protect the system from unauthorized access, reducing the threat of…

The elasticity of commercial cloud computing means organizations can easily add new regions and zones for specific purposes. It lets them add new accounts or new instances of applications just as easily. But for all of these resources to stay secure, they need to be accompanied by, or inherit, the zero trust elements assigned to the originals. That’s where AWS Control Tower comes in. Control Tower is a service for ensuring a customer’s governance and security rules cover all of an organization’s workloads and accounts. “It ensures that as new accounts come online, as new regions come online, they’re automatically…

Hello and welcome! My name is John Strand, and in this video, we’re going to be talking about Word Web Bug Servers. Now the idea of a Word Web Bug Server is we can create a Word document that any time that document is opened it will actually create a call back and it will allow us to identify where the attacker’s IP address is. Now the cool thing about Word Web Bugs is they don’t need to have macros enabled for them to fire. In fact, they don’t necessarily even have to open Microsoft Word at all. NO MACROS!NO…

ASUS is warning about an authentication bypass vulnerability in routers with AiCloud enabled that could allow remote attackers to perform unauthorized execution of functions on the device. The vulnerability, tracked under CVE-2025-2492 and rated critical (CVSS v4 score: 9.2), is remotely exploitable via a specially crafted request and requires no authentication, making it particularly dangerous. “An improper authentication control vulnerability exists in certain ASUS router firmware series,” reads the vendor’s bulletin. “This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions.” AiCloud is a cloud-based remote access feature built into many ASUS routers, turning…

Pershing Square CEO Bill Ackman — who disclosed in a Thursday (April 17) post on X that the firm owns a 19.8% stake Hertz — said in the post that Hertz and Uber would be ideal partners to roll out a fleet of autonomous vehicles (AVs).  Calling the idea a “fun thought experiment,” Ackman said in the post that such a partnership would bring together Hertz’s fleet of 500,000 vehicles, expertise in vehicle maintenance and 11,200 locations globally with Uber’s ability to improve the utilization and profitability of that fleet.  “Come to think of it, I am going to call [Uber CEO Dara Khosrowshahi],” Ackman said in…

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 42 Pierluigi Paganini April 20, 2025 Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malicious NPM Packages Targeting PayPal Users New Malware Variant Identified: ResolverRAT Enters the Maze       Nice chatting with you: what connects cheap Android smartphones, WhatsApp and cryptocurrency theft?   BPFDoor’s Hidden Controller Used Against Asia, Middle East Targets   Gorilla, a newly discovered Android malware Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia  Unmasking the new XorDDoS…

Ethan Robish // Why Segment Your Network? Here’s a quick recap from Part 1. A typical home network is flat. This means that all devices are connected to the same router and are on the same subnet. Each device can communicate with every other with no restrictions at the network level. This network’s first line of defense is a consumer router[1][2]. It also has your smart doorbell[3], door lock[4][5][6], lightbulb[7], and all your other IoT devices[8][9]. Not to mention all your PCs, tablets, and smartphones, which you, of course, keep patched with the latest security updates[10] right? Windows 7 is…

I love my job This isn’t said sarcastically or trying to convince myself. I genuinely love my job. I love my company and coworkers and the ability to help clients. I think I have the best job out there and I feel blessed. Japanese ikigai describes the intersection of what you love, what you’re good at, what the world needs, and what you can be paid for. I have that. And I’m always passionate about helping others find their way into security and dispelling myths and supporting underrepresented groups. Security professionals come from all walks of life, we need all…