New Hak5 Video Addresses Critical Cybersecurity Topics

In this new video from the @hak5 channel, several crucial cybersecurity topics are discussed. Firstly, an important reminder is given to developers: it is essential to stop pushing credentials to production environments. This practice can lead to serious vulnerabilities and security breaches.

One of the highlights of the video is the announcement of the cessation of operations by the ransomware group Hunters International. On July 3, 2025, this group, active for two years and having targeted institutions such as international banks and the FBI, published a memo on their dark web leak site announcing their closure. Although this is not their first attempt to shut down, this time it seems definitive. As a gesture of goodwill, Hunters International has decided to provide decryption keys for their current victims free of charge.

The video also addresses the impact of artificial intelligence in the field of cybersecurity. The creator of the curl command-line tool has issued a public statement on AI-generated security reports. He warns that submitting poor-quality reports on Hacker 1 can result in a search ban on the project. However, two months later, an AI chatbot became the highest-rated redteamer in the United States on Hacker 1. This bot, developed by the company XBO, has submitted nearly 1,600 vulnerabilities since August 2024. XBO has published a blog explaining their approach and the results obtained, highlighting that 45% of their findings are still awaiting resolution, demonstrating the significant impact of their submissions.

Another critical topic is the major vulnerability with a CVSS score of 10.0 discovered in two Cisco products. The CVE-2025-2309 affects the Unified Communications Manager and the Session Management Edition. This vulnerability is due to the presence of static credentials for the root account, used during development. An attacker could exploit this flaw to log into the system and execute arbitrary commands as root. Cisco emphasizes the importance of updating systems immediately, as there is no workaround for this vulnerability.

The video concludes with an invitation for viewers to share their thoughts and comments on the topics discussed. The presenter, Ally Diamond, thanks the viewers and encourages them to follow her online under the name "Ending with Ally" on various platforms, including Minecraft.

To learn more, watch the full video at the following address: https://www.youtube.com/watch?v=CvLgW3slekE