Author: HackWatchit

ORIGINALLY AIRED ON AUGUST 15, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Sneaking Candy03:32 – BHIS – Talkin’ Bout [infosec] News 2022-08-1507:06 – Story # 1: Blackhat 2022 recap – Trends and highlights – https://sysdig.com/blog/blackhat-2022-recap/09:52 – Story # 2: The Zoom installer let a researcher hack his way to root access on macOS – https://www.theverge.com/2022/8/12/23303411/zoom-defcon-root-access-privilege-escalation-hack-patrick-wardle14:14 – Story # 3: Researchers Find Vulnerabilities in Software Underlying Discord, Microsoft Teams, and Other Apps – https://www.vice.com/en/article/m7gb7y/researchers-find-vulnerability-in-software-underlying-discord-microsoft-teams-and-other-apps16:17 – Story # 4: Starlink Successfully Hacked Using $25 Modchip – https://threatpost.com/starlink-hack/180389/21:46 – Story # 5: Anonymous poop gifting site hacked, customers exposed – https://www.bleepingcomputer.com/news/security/anonymous-poop-gifting-site-hacked-customers-exposed/28:56 – Story #…

U.S. President Donald Trump issued an Executive Order to enhance the ability of states, local governments, and citizens to prepare more effectively for cyber-attacks and severe weather events. The Order launched a National Resilience Strategy that articulates the priorities, means, and ways to advance the resilience of the nation, while simplifying federal preparedness and response policies, allowing state and local authorities to comprehend better, plan for, and meet the needs of their communities. “Citizens are the immediate beneficiaries of sound local decisions and investments designed to address risks, including cyber attacks, wildfires, hurricanes, and space weather. When States are empowered…

Veeam has released fixes for a critical remote code execution vulnerability (CVE-2025-23120) affecting its enterprise Veeam Backup & Replication solution, and is urging customers to quickly upgrade to a fixed version. There is currently no indication that the vulnerability is being leveraged by attackers. It was privately reported by researcher Piotr Bazydlo of watchTowr Labs, who followed the release of the patch with a technical write-up and pointers on how a proof-of-concept exploit for a previously discovered vulnerability (CVE-2024-40711) can be modified to exploit CVE-2025-23120. About CVE-2025-23120 CVE-2025-23120 – which actually covers two RCE vulnerabilities based on similar deserialization gadgets…

A RansomHub affiliate is leveraging a new multi-function backdoor dubbed Betruger to perform various actions during their attacks, Symantec researchers have discovered. The Betruger backdoor The malware can take screenshots, log keystroke, scan networks, dump credentials, upload files to a command and control (C2) server, as well as be leveraged for privilege escalation. “Betruger was found while investigating an attempted attack. From there we found another case where it was used,” Dick O’Brien, Principal Intelligence Analyst with the Symantec Threat Hunter Team by Broadcom, told Help Net Security. “The limited number of attacks it has been used in suggests that…

BNB Chain introduced the Pascal Hardfork on March 20, an upgrade designed to boost transaction efficiency and improve its compatibility with the Ethereum Virtual Machine (EVM).This update integrates Ethereum Improvement Proposal (EIP) 7702, enabling advanced functionalities such as gas abstraction, smart contract wallets, and batch transactions.Pascal HardforkThe Pascal Hardfork marks a major step in the network’s development, positioning it as an early adopter of this critical EVM enhancement.A key feature of EIP-7702 is the introduction of smart contract wallets, which temporarily function as smart contracts. This allows for gasless transactions, batch approvals, and smoother asset swaps.The upgrade is also expected…

Cybersecurity Relies on Visualization Raw data often tells a story that’s hidden in plain sight. No matter how accurate or comprehensive, numbers on a spreadsheet can easily blur into an incomprehensible haze when patterns and anomalies are buried deep within thousands or millions of rows.  The human brain processes visuals 60,000 times faster than text, a testament to our evolutionary wiring for spotting patterns and making decisions based on what we see. Cybersecurity visualization harnesses this ability, converting raw, abstract data into actionable intelligence. With the right tools, analysts can quickly pinpoint threats, anomalies, and trends that would otherwise require…

Kali Linux has released version 2025.1a, the first version of 2025, with one new tool, desktop changes, and a theme refresh. Kali Linux is a distribution created for cybersecurity professionals and ethical hackers to red team exercises, penetration testing, security audits, and research against networks. As is typical for the year’s first version, the Kali Team has released new visual elements, including wallpapers and desktop environments. Note that the strange version number is because the developers stated they found a last-minute bug in 2025.1, which required a fix and rebuild. This led to the release of 2025.1a as the first…

A security researcher has discovered that the websites of over 100 car dealerships have been compromised in a supply-chain attack that attempted to infect the PCs of internet visitors.As researcher Randy McEoin explains in a blog post, cybercriminals infected the systems of LES Automotive, a company which provides a video services to help car dealerships market vehicles online.As a result, webpages that were supposed to display a video of an enticing vehicle could instead redirect dealerships’ online visitors to a third-party webpage which – in a technique known as a “ClickFix” attack – presented a CAPTCHA asking if they could…

We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain:  Infosec articles  Challenging puzzles  Comic book based on real-life hacking adventures  Coloring contests  Bonus Backdoors & Breaches Consultant Cards (print version only)  Other stuffs  You can check out current and upcoming issues here: https://www.blackhillsinfosec.com/prompt-zine/