Author: HackWatchit
Are you responsible for the security of webapps? Are you curious about how penetration testers are able to find vulnerabilities in them? Burp Suite is the preferred tool for many webapp pentesters and bug bounty hunters. It’s easy to get started in Burp, but not all of its features are easy to find or simple to configure. If you’ve ever watched someone else use Burp, you’ve no doubt picked up something useful from them: everyone seems to have their own tricks for getting more out of it. In this live one-hour Black Hills Information Security (BHIS) webcast, BB King will…
Symbolic Link trick lets attackers bypass FortiGate patches, Fortinet warns Pierluigi Paganini April 12, 2025 Fortinet warns attackers can keep read-only access to FortiGate devices even after the original vulnerability is patched. Fortinet warns that threat actors can retain read-only access to FortiGate devices even after the original vulnerability used for the breach has been patched. The cybersecurity firm revealed that attackers exploited known FortiGate flaws like CVE-2022-42475, CVE-2023-27997, and CVE-2024-21762 to gain persistent read-only access via a symlink in SSL-VPN language folders. “A threat actor used a known vulnerability to implement read-only access to vulnerable FortiGate devices. This was achieved via…
Jianwei Xun, the supposed Hong Kong philosopher whose book “Hypnocracy” claims Elon Musk and President Donald Trump use utopian promises and empty language, never really existed, at least not physically.Instead, the acclaimed author was a “collaborative” creation between Andrea Colamedici, an Italian publisher, and two AI tools – Claude from Anthropic and ChatGPT from OpenAI.”I wanted to write a book that would help people better understand the new ways power manifests itself,” Colamedici told Decrypt.But it wasn’t until after an investigative report from L’Espresso that Xun’s website was updated to acknowledge the experiment, snapshots from Wayback Machine reviewed by Decrypt…
Author/Presenter: Christophe Tafani-Dereeper Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel. Permalink *** This is a Security Bloggers Network syndicated blog from Infosecurity.US authored by Marc Handelman. Read the original post at: https://www.youtube-nocookie.com/embed/x4PcmQKS0Ao?si=syzV6Qj29Aitv8TF
months on a Machine Learning project, only to discover you never defined the “correct” problem at the start? If so, or even if not, and you are only starting with the data science or AI field, welcome to my first Ivory Tower Note, where I will address this topic. The term “Ivory Tower” is a metaphor for a situation in which someone is isolated from the practical realities of everyday life. In academia, the term often refers to researchers who engage deeply in theoretical pursuits and remain distant from the realities that practitioners face outside academia. As a former researcher,…
A hacker using the alias “Satanic” claims Magento breach via third-party, leaks CRM data of more than 700,000 users, including emails, phone numbers, and company info from major firms. A threat actor known as “Satanic” has claimed responsibility for a new data breach involving Magento, the open-source e-commerce platform used by thousands of businesses globally. According to the hacker, the alleged data breach occurred on April 9, 2025, via a third-party integration, leading to the theft of a large dataset containing detailed business and personal contact information. The breach, which remains unverified by Adobe (Magento’s parent company), includes what the…
Effective task delegation is a vital skill for any manager. Strategically transferring specific tasks to capable team members can boost efficiency, improve decision-making, and empower staff to create a healthy, collaborative work environment. Research into the topic even suggests that effective delegators see 33% higher revenue and significantly lower employee turnover when compared to their less able counterparts. However, delegation in the digital world means more than just sharing responsibility for office tasks. It’s about managing identities and access across internal departments and external partners, which can be a major headache without delegating tasks. The Problem: Managing Identities Most modern organizations work…
Jordan Drysdale // tl;dr SILENTTRINITY (ST) is one of our favorite C2 tools at BHIS. It’s multiplayer, modern, and multiserver. The code has been revised significantly of late, especially the installation… and the instructions in the original blog I wrote are no longer accurate. https://www.blackhillsinfosec.com/my-first-joyride-with-silenttrinity/ Also, please read the call to arms. Help and support for open source is needed. https://porchetta.industries/2020/11/17/And-Now-For-Something-Completely-Diffrent/ We all know tools change, grow, and update over time…and blogs do not without intervention. At this point, the original blog on joyriding with ST is inaccurate. And, that’s okay. So, the following instruction set will provide the fastest…
President Donald J. Trump has signed an executive order aimed at strengthening the United States electric grid. The order, titled “Strengthening the Reliability and Security of the United States Electric Grid,” comes amid a national energy emergency and rising electricity demand driven by artificial intelligence data centers and increased domestic manufacturing. The order declares the reliability of the electric grid a matter of national and economic security, citing the risk posed by capacity shortfalls. It outlines a federal policy to ensure resilient power generation by leveraging all available energy resources, particularly those with redundant and secure fuel supplies capable of…