Author: HackWatchit

moth // Recently, BHIS penetration tester Dale Hobbs was on an Internal Network Penetration Test and came across an RPC-based arbitrary command execution vulnerability in his vulnerability scan results.  Nessus Plugin ID 59642  I had mentioned in passing that I was working on learning more about remote procedure calls, and Dale invited me to take a look at this vulnerability with him, an invitation that I happily accepted.  Quick disclaimer before the party starts: All credit to the initial disclosure of this vulnerability goes to Ron Bowes and Tenable. Even though this vulnerability is 10 years old at this point,…

The telecom industry is at a major turning point. With 5G, IoT, and AI reshaping global connectivity, the need for scalable, secure, and smart networks is higher than ever. Cloud IMS is stepping up as a game-changer, combining the flexibility of cloud technology with the reliability of traditional IMS systems. Virtualizing core network functions helps telecom operators roll out next-generation services while keeping security strong in a time of growing cybersecurity threats. This article breaks down how Cloud IMS has evolved, the key benefits it brings to telecom, and the advanced security measures that help protect essential digital infrastructure. Cloud…

Introduction In the “ever rapidly changing landscape of Data and AI” (!), understanding data and AI architecture has never been more critical. However something many leaders overlook is the importance of data team structure. While many of you reading this probably identify as the data team, something most don’t realise is how limiting that mindset can be. Indeed, different team structures and skill requirements significantly impact an organisation’s ability to actually use Data and AI to drive meaningful results. To understand this, it’s helpful to think of an analogy. Imagine a two-person household. John works from home and Jane goes to the…

The U.S. Federal Trade Commission (FTC) said today that Americans lost a record $12.5 billion to fraud last year, a 25% increase over the previous year. Consumers reported that investment scams resulted in the highest losses, totaling around $5.7 billion with a median loss of over $9,000 and exceeding all other fraud categories. The second largest reported loss was linked with imposter scams, amounting to $2.95 billion in 2024. Younger people have also reported losing money to fraud more often than people over 70, as 44% of all reports filed last year came from consumers between 20 and 29. Job…

Can a Holistic Approach to Machine Identities and Secret Level Up Your Data Protection? Every organization needs a sophisticated security strategy to defend against cyber threats. But does your approach address the critical area of Non-Human Identities (NHIs) and their secrets? By placing a spotlight on this niche, we allow decision-makers and security professionals to recognize the value that secure NHI management brings to their cybersecurity posture. Locking Down the Cloud: The Role of Non-Human Identities Non-Human Identities have gained significant importance in contemporary cybersecurity practices, primarily as organizations increasingly rely on cloud environments for operations. What are NHIs, exactly?…

Did Donald Trump just flipped the script on crypto? Four years ago, he dismissed Bitcoin as a scam. Now, he’s signed an executive order to establish a strategic reserve of Bitcoin and other digital assets, pushing the U.S. into uncharted financial territory. This isn’t just a policy shift; it’s a bold statement that could redefine America’s role in the global economy,or maybe at least a blow up in its face. So, what’s this crypto strategic reserve that has been buzzing the media Anyway, What’s a Strategic Reserve? Just Picture a national piggy bank. For decades, Countries have been stockpiling assets…

We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain:  Infosec articles  Challenging puzzles  Comic book based on real-life hacking adventures  Coloring contests  Bonus Backdoors & Breaches Consultant Cards (print version only)  Other stuffs  You can check out current and upcoming issues here: https://www.blackhillsinfosec.com/prompt-zine/ 

Pondurance announced a major new version of its cybersecurity platform. Pondurance Platform 2.0 provides the foundation for Pondurance’s risk-based MDR service specifically designed to eliminate breach risks. With this announcement, Pondurance arms customers with the latest monitoring, detection, and response capabilities through a new platform that encompasses everything organizations entrusted with personal customer information need to protect themselves from breach risks. This unified portal enables them to detect, respond to, and remediate cyber threats in collaboration with the experts at Pondurance’s always-on security operations center (SOC). “Our newly released Pondurance Platform 2.0 represents the culmination of a yearslong effort to…

Colt Hagmaier has started a new role as Chief Counsel (A) at FEMA, a move he announced on LinkedIn. With an extensive career in emergency management and legal counsel, Hagmaier brings nearly two decades of experience in federal disaster response and recovery law to his new role. Prior to this, Hagmaier served as the Assistant Administrator for Recovery at FEMA, where he led a workforce of approximately 10,000 employees across six divisions, managing an annual budget exceeding $150 million. In this role, he oversaw FEMA’s post-disaster recovery programs, including Public Assistance and Individual Assistance, and directed the administration of over…