Author: HackWatchit

Detectify announced Alfred, a system that uses AI to completely autonomously source, prioritize, and generate high-fidelity security tests for the CVEs that are most likely to be exploited. This innovation allows Detectify to continuously and dynamically deliver security research to AppSec teams with speed and coverage, uniting the automation of human ingenuity from the Detectify Crowdsource community of ethical hackers with the powerful capabilities of AI Research. With more than 100 new CVEs published daily and a growing number of vulnerabilities not covered by the CVE system, security teams are increasingly overwhelmed. They must ensure they are testing for the…

Alyssa Snow // During an external or internal network penetration test, it can be challenging to comb through each web server in scope to find the juicy stuff. During a timeboxed assessment, a tool like Gowitness (https://github.com/sensepost/gowitness/wiki) can help prioritize the web applications available on your target network.   Gowitness is an automated website screenshot tool, inspired by Eyewitness (https://github.com/FortyNorthSecurity/EyeWitness), written in Golang. Gowitness navigates to each web application and uses a headless browser to generate screenshots of the web application. It fingerprints these applications by capturing the HTML response and HTTP headers. Additionally, Gowitness attempts to identify technologies used…

Microsoft has removed a compatibility hold that prevented some AutoCAD users from installing the Windows 11 2024 Update due to launch and crash issues. As Redmond explained when it acknowledged this known issue last month, it affects all AutoCAD 2022 versions, but other AutoCAD releases are not impacted. “After installing Windows 11, version 24H2, all versions of Autodesk AutoCAD 2022 might not open on some devices. Users have reported encountering an error when launching the application,” Microsoft said. “All other versions of AutoCAD and AutoCAD LT are working as expected, such as AutoCAD 2023, 2024, and 2025, and will not…

In today’s hyper-connected world, the Internet of Things (IoT) and digital technologies have revolutionized industries across the globe. However, with this progress comes the growing threat of cyber attacks targeting Operational Technology (OT). These attacks pose serious risks to critical infrastructure sectors, including energy, manufacturing, transportation, and utilities. Unlike traditional Information Technology (IT) systems, OT systems manage and control physical processes in industries that are vital for societal function. Understanding OT cyber attacks is crucial for safeguarding against potential disasters. What Is Operational Technology (OT)? Operational Technology refers to hardware and software systems that detect or cause changes through direct…

Every year, millions of old tech are thrown away due to age, malfunctions, or to make way for new ones, which creates security risks related to the data on these devices. The data can often still be recovered if devices are erased without proper tools and procedures. Here’s why securely disposing of old tech is crucial. Old devices may still contain: Saved passwords and login credentials Banking and credit card information Personal photos, emails, and documents Identity-related data (passport scans, social security numbers, etc.) Falling into the wrong hands, this information can be used for identity theft, financial fraud, or…

Hetty is an open-source HTTP toolkit designed for security research, offering a free alternative to commercial tools like Burp Suite Pro. Built with the needs of penetration testers, security professionals, and bug bounty hunters in mind, Hetty provides a set of features for HTTP interception, analysis, and manipulation. Features MITM HTTP proxy – Capture and inspect traffic with advanced logging and search capabilities. HTTP client – Manually create, edit, and replay requests for detailed testing. Request and response Interception – Modify, resend, or cancel traffic for in-depth analysis. Scope management – Keep engagements organized by defining project boundaries. Web-based interface…

We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain:  Infosec articles  Challenging puzzles  Comic book based on real-life hacking adventures  Coloring contests  Bonus Backdoors & Breaches Consultant Cards (print version only)  Other stuffs  You can check out current and upcoming issues here: https://www.blackhillsinfosec.com/prompt-zine/ 

Feds seized $23 million in crypto stolen using keys from LastPass breaches Pierluigi Paganini March 10, 2025 U.S. authorities seized $23M in crypto linked to a $150M Ripple wallet theft, experts believe the incident is linked to the 2022 LastPass breach. U.S. authorities seized $23M in crypto tied to a $150M Ripple hack, suspected to have been carried out by hackers from the 2022 LastPass breach. Security researcher ZachXBT identified the victim as Ripple co-founder Chris Larsen. Authorities seized $24M in frozen assets before they could be withdrawn. This aligns with prior findings that cybercriminals cracked master passwords from LastPass…

By Corey Hulen In 2023, victims reported nearly 900,000 cybercrime complaints to the FBI. Altogether, losses eclipsed $12.5 billion — a significant 22% increase from the losses in 2022. Unsurprisingly, experts predict this trend will continue to grow as we move further into the future. While any business is a potential target for hackers, critical infrastructure organizations — including defense, healthcare, energy, utilities, and financial services companies — are perhaps most at risk due to their financial resources. According to the U.S. House Committee on Homeland Security, attacks on critical infrastructure organizations increased 30% in 2023. With cyberattacks becoming more…