Author: HackWatchit

As a continuation of its earlier research report, Resecurity released new threat intelligence research highlighting threat actors targeting energy installations in North America, Asia, and the European Union, including nuclear facilities and related research entities. Energy firms are facing escalating cyber threats from hacktivists, ransomware groups, and nation-state actors, particularly those linked to China, Iran, North Korea, and Russia. These attacks, often driven by geopolitical tensions and ideological motivations, have primarily focused on cyber-espionage rather than physical disruption.  However, increasing IT-OT convergence, cloud adoption, and the rise of IIoT have made operational networks more vulnerable. Ransomware actors now target OT…

In 2024, businesses paid $813 million to cyber criminals as the result of ransomware. That’s an astronomical sum, highlighting the immense financial burden cybercrime places on organizations. Rhode Island’s cyberattack of December 2024, where state officials paid out a $5 million ransom, also serves as a cautionary tale.  While the state ultimately recovered its data, the process was long, arduous, and costly, not just in terms of money but also in the loss of trust by those whose data was shared and operational disruptions that spanned about a month’s time. Now, scale that to businesses across industries, and the economic…

Phone theft is now commonplace in London. The Met Police recently revealed that it seizes 1,000 stolen phones weekly as it cracks down on organized criminal networks driving the £50 million trade. Nationally, cases have doubled to 83,900 annually. The real issue, though, isn’t the losing of a phone – it’s what happens next. Thieves are after the valuable digital assets inside the phone. With the proper access, a stolen phone becomes an all-access pass to a victim’s financial accounts, personal data, and even work credentials. Many assume their banking apps and accounts are safe because of biometrics and two-factor…

One of our favorite BHIS guest presenters, Hal Pomeranz, returns for more of the Linux goodness. Roll up for a magical tour through the mysteries of Linux file systems! Relative atime updates, block groups, and allocation strategies, deleted directory entries, and even more will be revealed! This information will help you understand your Linux timelines and recover deleted data more quickly. It’s a perilous journey off the beaten path from which you will not return unchanged! Join the Black Hills Information Security Discord discussion server — https://discord.gg/aHHh3u5 Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/08/SLIDES_LinuxMagicalMysteryTour.pdf 0:00 – Head On…

Are you struggling with your Nintendo Switch VPN not working? You’re not alone. Many Switch users encounter VPN issues that prevent online gaming, from NAT-type restrictions to complete connection failures. This guide provides practical solutions to get you back online quickly. Common Nintendo Switch VPN problems Before diving into solutions, let’s understand what might be causing your Nintendo Switch VPN issues: NAT type restrictions: Nintendo requires NAT Type A or B for optimal online play, but VPNs often result in Type D (most restrictive) Connection drops: Frequent disconnections during gameplay Slow speeds: Severe lag makes online games unplayable Complete connection…

PKWARE announced its quantum readiness assessment and encryption capabilities to help organizations protect sensitive data from quantum computing threats. Quantum computing is no longer theoretical—it is becoming a powerful reality with the potential to disrupt current encryption standards. As quantum machines become capable of breaking traditional encryption methods like RSA and ECC, organizations must act now to secure their data for the future. PKWARE simplifies what could be a complex transition to post-quantum cryptography with proven tools and expert guidance. The PKWARE Quantum Readiness Assessment helps organizations assess their current exposure and build a roadmap to ensure crypto agility. Organizations can…

Entertainment venue management firm Legends International warns it suffered a data breach in November 2024, which has impacted employees and people who visited venues under its management. In a notification letter shared with the authorities, the company informs that it detected unauthorized activity in its IT systems on November 9, 2024, prompting an investigation carried out with the help of external cybersecurity experts. The investigation results confirmed that the intruders had exfiltrated personal data files, though the exposed data types aren’t determined in the sample letter. Legends International is a global sports and entertainment services company offering venue planning, sales,…

Security researchers report CVE-2025-32433, a CVSS 10.0 RCE vulnerability in Erlang/OTP SSH, allowing unauthenticated code execution on exposed systems. A newly disclosed vulnerability in the Erlang/OTP SSH implementation could allow attackers to run code on affected systems without logging in. The flaw, tracked as CVE-2025-32433, was reported by researchers at Ruhr University Bochum and has been rated with a maximum CVSSv3 score of 10.0 due to its potential impact on systems using the widely deployed library. Disclosed by researchers via the oss-security mailing list, the issue affects the SSH protocol message handling within Erlang/OTP, allowing attackers to send specially crafted…

Jordan Drysdale & Kent Ickler // TL;DR Look for links, download them. Look for GPOs, import them. Look for screenshots, for guidance. Sysmon + Windows Audit Policies + Event Collectors and Forwarding (Handlers) + WinLogBeat + Elastic = The baseline configuration for producing endpoint optics that matter (for almost free). PART 1 – Building Your Lab Environment There are some significant pre-recommendations for a complete follow along. Be warned, this environment will not run on your laptop. Be prepared to consume 6 CPUs, 20GB of RAM and about 120GB of disk space. It would be best to deploy a PFSense…