Author: HackWatchit

Cisco has patched a denial of service (DoS) vulnerability that lets attackers crash the Border Gateway Protocol (BGP) process on IOS XR routers with a single BGP update message. IOS XR runs on the company’s carrier-grade, Network Convergence System (NCS), and Carrier Routing System (CRS) series of routers, such as the ASR 9000, NCS 5500, and 8000 series. This high-severity flaw (tracked as CVE-2025-20115) was found in the confederation implementation for the Border Gateway Protocol (BGP), and it only affects Cisco IOS XR devices if BGP confederation is configured. Successful exploitation allows unauthenticated attackers to take down vulnerable devices remotely in low-complexity attacks by causing memory…

Artificial Intelligence (AI) has significantly transformed various sectors, offering tools that enhance efficiency and innovation. However, the emergence of uncensored AI chatbots like GhostGPT has introduced new challenges in cybersecurity. Designed without ethical safeguards, GhostGPT provides cyber criminals with a potent tool for malicious activities. The Rise of GhostGPT: An AI Without Limits GhostGPT is an uncensored AI chatbot tailored specifically for criminal use. Unlike traditional AI models that incorporate safety mechanisms to prevent misuse, GhostGPT operates without such constraints. It likely utilizes a jailbroken version of ChatGPT or an open-source large language model (LLM), effectively removing any safeguards. This design allows…

The FBI, America’s federal law enforcement agency, has issued an urgent warning to all Gmail users about an ongoing hacking campaign carried out by the operators of Medusa Ransomware. According to the FBI, this cybercriminal group is notorious for encrypting victims’ data and demanding hefty ransoms, often running into the millions of dollars, in exchange for decryption keys. So far, Medusa Ransomware has compromised around 300 targets, primarily relying on phishing scams to spread its malware. The attacks have primarily focused on exploiting vulnerabilities in unpatched software systems, affecting a variety of devices and networks. In addition to the FBI’s…

ColorTokens Inc., a global enterprise microsegmentation company, announced on Thursday a partnership with Wipro Limited, a technology services and consulting company, to launch Breach Ready Security Solution — an AI-powered Zero Trust microsegmentation security defense solution tailored for global enterprises. Breach Ready Security Solution offers comprehensive visualization of the security landscape with real-time risk identification. Enterprises get ransomware and malware impact mitigation for all workloads and endpoints, including cloud environments, IoT/OT devices, and data centers, to minimize any operational disruption.  The solution integrates ColorTokens’ comprehensive microsegmentation platform — Xshield — with Wipro’s CoreProtect, a Wipro framework, to provide Zero Trust-based…

Cisco IOS XR flaw allows attackers to crash BGP process on routers Pierluigi Paganini March 15, 2025 Cisco addressed a denial of service (DoS) vulnerability that allows attackers to crash the Border Gateway Protocol (BGP) process on IOS XR routers. Cisco has addressed a denial of service (DoS) vulnerability, tracked as CVE-2025-20115, that could allow an unauthenticated, remote attacker to crash the Border Gateway Protocol (BGP) process on IOS XR routers by sending a single BGP update message. IOS XR is a network operating system developed by Cisco for carrier-grade and service provider routers. It is based on a microkernel architecture, designed for high…

Creating efficient prompts for large language models often starts as a simple task… but it doesn’t always stay that way. Initially, following basic best practices seems sufficient: adopt the persona of a specialist, write clear instructions, require a specific response format, and include a few relevant examples. But as requirements multiply, contradictions emerge, and even minor modifications can introduce unexpected failures. What was working perfectly in one prompt version suddenly breaks in another. If you have ever felt trapped in an endless loop of trial and error, adjusting one rule only to see another one fail, you’re not alone! The…

Here’s a look at the most interesting products from the past week, featuring releases from Alloy, Detectify, Pondurance, and SimSpace. SimSpace Stack Optimizer allows organizations to measure their security technologies Stack Optimizer is designed to help organizations make informed, strategic decisions about their security investments. By validating security controls, streamlining security operations, and optimizing technology performance, organizations can improve detection accuracy, reduce response times, and maximize security ROI. Pondurance Platform 2.0 identifies data breach risks Pondurance Platform 2.0 provides the foundation for Pondurance’s risk-based MDR service specifically designed to eliminate breach risks. The core of this new platform is the…

25 Oct 2022 Webcast: Demystifying Web3 Attack Vectors, w/ Beau Bullock and Steve Borosh Webcast: Coercions and Relays – The First Cred is the Deepest w/ Gabriel Prud’homme Looking For Something?Browse by category Select Category Alyssa Snow  (7) Ashley Knowles  (1) Ashley Van Hoesen  (1) Author  (402) Backdoors & Breaches  (7) Beau Bullock  (32) Ben Bowman  (1) Ben Burkhart  (1) Blue Team  (101) Blue Team Tools  (40) Brian Fehrman  (18) Brian Ireland  (1) Brian King  (20) Bronwen Aker  (1) C2  (29) Cameron Cartier  (2) Carrie Roberts  (5) Chris Sullo  (1) Chris Traynor  (2) CJ Cox  (8) Connor Costigan  (1) Corey Ham  (4) Craig Vincent  (2) Dale Hobbs  (3) Daniel Pizarro  (1) Darin Roberts  (1) Dave Blandford  (2) David Fletcher  (30) David Perez  (1) Deb Wigley  (1) Debjeet Banerjee  (1) Derek Banks  (13)…

A misconfigured database exposed 108.8 GB of sensitive data, including information on over 86,000 healthcare workers affiliated with ESHYFT, a New Jersey-based HealthTech company operating across 29 states. ESHYFT also provides a mobile platform that connects healthcare facilities with qualified nursing professionals. The exposed database was not password-protected or encrypted and contained a treasure trove of personally identifiable information (PII) including SSNs, scans of identification documents, salary details, work history, and more. The database was discovered by cybersecurity researcher Jeremiah Fowler who shared their report with Hackread.com revealing that the exposed data included profile images, facial images, professional certificates, work…