Author: HackWatchit

This webcast originally aired March 6, 2025. In this video, John Strand and his team discuss the challenges of setting up and running wireless labs, particularly focusing on the issues faced during Wild West Hackin’ Fest events. They highlight the development of an open-source project aimed at virtualizing wireless labs, which allows learners to practice wireless hacking techniques without needing physical hardware. This project is designed to make wireless security education more accessible by removing the barriers of expensive gear and complex setups, thus fostering a deeper understanding of wireless technologies. The webinar discusses the challenges and solutions in virtualizing…

The Center for Cybersecurity Belgium (CCB) announced on Monday that since the implementation of the NIS2 legislation last October, 2,410 organizations from critical sectors have registered, contributing to a total of over 4,500 organizations across various sectors. The initiative signifies the launch of the most extensive cybersecurity initiative in the country’s history. According to an estimate based on figures from the FPS Economy, approximately 2,500 organizations fall within the scope of NIS2. Consequently, it can be concluded that the vast majority have timely aligned themselves by registering. The CCB said that registered organizations receive free access to several services, including…

There has been a gradual but alarming shift in the digital threat landscape over the last few years, as Advanced Persistent Threats (APTs) become more prominent and more potent. The volume of overall cyberattacks reached a crescendo in 2024, experiencing a 75% increase compared with the previous year. Moreover, according to Gartner, AI-enhanced malicious attacks were the highest ranking cited risk among enterprise risk executives in 2024. The year ahead will likely see this continue, with the level of intelligent design evolving. AI is enabling attackers to build sophisticated campaigns with unprecedented speed and precision. By automating reconnaissance, dynamically adapting malware, and mimicking legitimate…

Cloudflare announced that it is expanding end-to-end support for post-quantum cryptography to its Zero Trust Network Access solution. Available immediately, organizations can securely route communications from web browsers to corporate web applications to gain immediate, end-to-end quantum-safe connectivity. By mid-2025, Cloudflare will extend this support to include all IP protocols, significantly broadening compatibility across most corporate applications and devices. With this, organizations will be able to rely on Cloudflare to transition their Internet communications between users, devices, and applications to post-quantum cryptography without the complexity of individually upgrading each corporate application or system. Today encryption is used to keep online…

If you’re on Android and want to enable Signal notifications, you may want to disable smart replies by going to Settings > Apps & Notifications > Notifications > Advanced and making sure “Suggested actions and replies” are turned off. Google says it keeps smart replies private by processing them locally on your device, but the safest bet is to limit Signal’s interactions with the rest of the operating system.Signal also has a Screen Lock feature that requires your password—or FaceID or TouchID, whatever you use to get into your phone—to view the app’s contents. Within the Signal app on either…

In my previous piece, I outlined my roadmap for transforming Tonga into the Web3 Tech Hub of the Pacific. Today, I want to expand on what true digital sovereignty means and why this vision transcends traditional geopolitical boundaries. True Sovereignty in the Digital Age The concept of sovereignty has traditionally been tied to land, borders, and governmental authority. Web3 fundamentally re-imagines this paradigm. When I speak of making Tonga the Web3 Tech Hub of the Pacific, I’m advocating for a new form of sovereignty, one that exists beyond the constraints of traditional political structures. The beauty of blockchain technology is…

​Microsoft says the March 2025 Windows cumulative updates automatically and mistakenly remove the AI-powered Copilot digital assistant from some Windows 10 and Windows 11 systems. The warning was added to updated support documents days after Redmond released this month’s Patch Tuesday security updates. As Microsoft explains, the update applies to all users who install the KB5053598 (Windows 24H2) and KB5053606(Windows 10 22H2) cumulative updates issued last week, on March 11th. “We’re aware of an issue with the Microsoft Copilot app affecting some devices. The app is unintentionally uninstalled and unpinned from the taskbar,” the company explains. “This issue has not…

A security researcher has given victims of the prolific Akira ransomware hope that they can recover their encrypted data without having to pay a ransom.Yohanes Nugroho, a software programmer from Indonesia who writes the Tinyhack blog, said he found a way to brute-force the malware’s encryption using Nvidia GPUs that already has proven successful with one of the ransomware’s victims.In a highly detailed blog post, Nugroho runs through the three-week process of developing the decryptor, nothing that his initial thought after a first look at the challenge was, “This should be easy – just brute-force it by looking at the…

A Technical Walkthrough of the Nibbles Machine on PG Practice PostgreSQL is a widely used open-source relational database management system (RDBMS). While known for its robustness and security features, misconfigurations and outdated versions can introduce vulnerabilities that attackers can exploit.  In this blog post, we provide a technical walkthrough of exploiting a PostgreSQL vulnerability in the Nibbles machine on PG Practice. This lab demonstrates exploiting a PostgreSQL server with default credentials and leveraging its misconfigured settings to gain a reverse shell. Learners will escalate privileges by abusing a misconfigured SUID find binary. The lab emphasizes database exploitation, remote command execution,…