Author: HackWatchit

28 Jul 2021 How to Phish for User Passwords with PowerShell What To Know About Microsoft’s Registry Hive Flaw: #SeriousSAM Looking For Something?Browse by category Select Category Alyssa Snow  (7) Ashley Knowles  (1) Ashley Van Hoesen  (1) Author  (402) Backdoors & Breaches  (7) Beau Bullock  (32) Ben Bowman  (3) Ben Burkhart  (1) Blue Team  (103) Blue Team Tools  (42) Brian Fehrman  (18) Brian Ireland  (1) Brian King  (20) Bronwen Aker  (1) C2  (29) Cameron Cartier  (2) Carrie Roberts  (5) Chris Sullo  (1) Chris Traynor  (2) CJ Cox  (8) Connor Costigan  (1) Corey Ham  (4) Craig Vincent  (2) Dale Hobbs  (3) Daniel Pizarro  (1) Darin Roberts  (1) Dave Blandford  (2) David Fletcher  (30) David Perez  (1) Deb Wigley  (1) Debjeet Banerjee  (1) Derek Banks  (13) Derrick Rauch  (1) DFIR  (1) DNSTAP  (1) Ethan Robish  (14) External/Internal  (68) Fernando…

In my last several articles I talked about generative deep learning algorithms, which mostly are related to text generation tasks. So, I think it would be interesting to switch to generative algorithms for image generation now. We knew that nowadays there have been plenty of deep learning models specialized for generating images out there, such as Autoencoder, Variational Autoencoder (VAE), Generative Adversarial Network (GAN) and Neural Style Transfer (NST). I actually got some of my writings about these topics posted on Medium as well. I provide you the links at the end of this article if you want to read…

Accidentally deleted some photos from your iPhone? You’re definitely not alone; most iPhone users have done it at some point. The good news is that it’s often not the end of the road. In this guide, we’ll walk you through several straightforward ways to recover those deleted pictures, with clear steps anyone can follow. Can You Get Deleted Photos Back on iPhone? In short? Yes, most of the time, you can. Apple knows people accidentally delete stuff all the time. Maybe you tapped the wrong photo while half-asleep or thought you had a backup when you didn’t. Whatever the reason,…

After last month’s targeted and complex cyber attack on Ukrzaliznytsia that led to a disruption of online ticket sales and cargo registration, the rail operator has identified a distinct ‘Russian trace’ in the incident. Currently, up to 90 percent of essential online passenger services have been restored. Ukrainian Railways specialists ‘plan to launch online services for freight forwarders during the first decade of April.’ Ukraine’s state-owned railway company said in a statement that it took four days of relentless work to restore crucial services, prioritizing passenger ones. Customer database remains safe, nevertheless, the system still requires a profound amount of…

Sending end-to-end encrypted (E2EE) emails from Gmail enterprise accounts is about to become much easier than it is now, Google has announced on Tuesday. The company will first make available this simplified capability to users who want to send E2EE emails to other Gmail users in their own organization, and will extend it in the coming weeks to include E2EE emails to external enterprise or personal Gmail inboxes. Finally, later this year, they will be able to send E2EE emails to users who don’t use Gmail. Gmail end-to-end encrypted emails from the users’ point of view “End-to-end encrypted (E2EE) email…

Google Calendar is a widely used tool for scheduling online events, meetings, and sending reminders. However, a concerning new trend has emerged where cybercriminals are exploiting this platform to target unsuspecting victims with phishing scams and attempts to steal sensitive data. In this type of attack, the hacker sends out a seemingly harmless invitation to an event, meeting, or even a payment reminder. Since these invitations often come from familiar sources, like a colleague, friend, or even a business partner, recipients are more likely to trust the message and click on the embedded link. Unfortunately, this link leads to a…

In today’s digital landscape, understanding your organization’s attack surface is crucial for maintaining robust cybersecurity. To effectively manage and mitigate the cyber-risks hiding in modern attack surfaces, it’s important to adopt an attacker-centric approach. In this article, we will be diving deeper into a company’s attack surface, what might have been forgotten and overlooked during the day-to-day rush and how cybersecurity professionals can regain the momentum and overview with the help of external attack surface management tools. What makes up your organizations attack surface? Security specialists generally define the attack surface as the sum of all possible points in a…

#hivenightmare / #lolwut Jeff McJunkin* // What is it? tl;dr — Unpatched privilege escalation in Windows 10 in nearly all supported builds. The vulnerability (CVE-2021–36934) allows an attacker with limited user code execution on Windows 10 (or 11) to gain administrative privileges locally, allowing any of the following follow-on attacks: Stealing credential material for any logged-on users (via Mimikatz-style LSASS attacks) Dumping and cracking cached domain credentials Persistence on the Windows 10 machine via Silver Ticket attacks What can we do? There is no patch from Microsoft, but there is an available workaround: Due to weak permissions, limited users can…

U.S. CISA adds Apache Tomcat flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 02, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apache Tomcat flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apache Tomcat path equivalence vulnerability, tracked as CVE-2025-24813, to its Known Exploited Vulnerabilities (KEV) catalog. The Apache Tomcat vulnerability CVE-2025-24813 was recently disclosed and is being actively exploited just 30 hours after a public PoC was released. The issue is a path equivalence flaw in Apache Tomcat that allows remote code execution or information disclosure if specific conditions…