Author: HackWatchit

all been in that moment, right? Staring at a chart as if it’s some ancient script, wondering how we’re supposed to make sense of it all. That’s exactly how I felt when I was asked to explain the AUC for the ROC curve at work recently. Though I had a solid understanding of the math behind it, breaking it down into simple, digestible terms proved to be a challenge. I realized that if I was struggling with it, others probably were too. So, I decided to write this article to share an intuitive way to understand the AUC-ROC curve through…

Cyber threats aren’t going away, and CISOs know prevention isn’t enough. Being ready to respond is just as important. Cyber crisis simulations offer a way to test that readiness. They let teams walk through real-world scenarios in a controlled setting, exposing gaps and showing what needs work. It’s a practical way to strengthen response plans before a real attack hits. Budgets are up, and so is pressure A recent survey by Hack The Box shows that 74% of CISOs plan to increase annual budgets for cyber crisis simulations this year, driven by a wave of high-profile incidents in 2024. Many…

Imagine a blockchain so seamless, so user-friendly, that even your grandparents could use it—and they wouldn’t even know they’re on Web3. That’s the mission Anthony Anzalone has taken head-on with XION, a project born not just out of necessity, but out of frustration with how Web3 has boxed itself in. In this edition of “Behind the Startup”, we dive deep into Anthony’s journey—from making headlines with a Banksy NFT to building one of the most intuitive Layer 1s the industry has ever seen. Let’s get into it.Ishan Pandey: Hi Anthony Anzalone, welcome you to our “Behind the Startup” series. What…

Actively Exploited Zero-Day Vulnerability in Windows Common Log File System CVE-2025-29824 is an Important elevation of privilege vulnerability affecting Windows Common Log File System and has a CVSS score of 7.8. This could allow a remote attacker to run arbitrary code on a victim machine after tricking a victim into either opening a malicious file from an email or message, or navigating to an adversary-owned website. While this vulnerability proof-of-concept has not been disclosed, Microsoft confirmed it has been actively exploited in the wild. Updates for Windows 10 32-bit and x64 systems are pending release. Table 1. Zero-day in Windows…

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft’s most-dire “critical” rating, meaning malware or malcontents could exploit them with little to no interaction from Windows users. The zero-day flaw already seeing exploitation is CVE-2025-29824, a local elevation of privilege bug in the Windows Common Log File System (CLFS) driver.  Microsoft rates it as “important,” but as Chris Goettl from Ivanti points out, risk-based prioritization warrants treating it as critical. This CLFS component of…

A recent security advisory from Facebook Security highlights a spoofing vulnerability tracked as CVE-2025-30401 affecting WhatsApp for Windows. The flaw could have allowed hackers to send malicious attachments to unsuspecting users. These files would appear harmless at first but could run malicious code if opened within the WhatsApp app. This vulnerability impacts all versions before 2.2450.6 and poses a major risk to users who frequently interact with file attachments through WhatsApp for Windows. For users not interested in technical details, the issue started with a weird mismatch in how WhatsApp for Windows worked. WhatsApp would show users the attachment based…

Threat actors are abusing SourceForge to distribute fake Microsoft add-ins that install malware on victims’ computers to both mine and steal cryptocurrency. SourceForge.net is a legitimate software hosting and distribution platform that also supports version control, bug tracking, and dedicated forums/wikis, making it very popular among open-source project communities. Although its open project submission model gives plenty of margin for abuse, actually seeing malware distributed through it is a rare occurrence. The new campaign spotted by Kaspersky has impacted over 4,604 systems, most of which are in Russia. While the malicious project is no longer available on SourceForge, Kaspersky says…

The Livestream of our first Backdoors & Breaches (B&B) session using our new Tabletop Simulator (TTS) version of the game was a success! If you have STEAM / TABLETOP SIMULATOR / BACKDOORS & BREACHES WORKSHOP, you can play using the same version of the game. 11:05​ – Backdoors & Breaches Session Begins! Our good friend Edward Miro wrote an extensive guide on how to install and use B&B on TTS. Check it out below! https://www.blackhillsinfosec.com/backdoors-breaches-tabletop-simulator-guide/

Google fixed two actively exploited Android zero-days Pierluigi Paganini April 08, 2025 Google addressed 62 vulnerabilities with the release of Android ‘s April 2025 security update, including two actively exploited zero-days. Google released Android ‘s April 2025 security updates to address 62 vulnerabilities, including two zero-day vulnerabilities (CVE-2024-53197, CVE-2024-53150) exploited in targeted attacks. The vulnerability CVE-2024-53197 is a Linux kernel issue affecting ALSA USB audio. Malicious devices could exploit a config value to trigger out-of-bounds memory access. Amnesty International reported that a Cellebrite zero-day exploit was used to unlock the Android smartphone of a Serbian activist. In a statement published on 25…