Author: HackWatchit

LangExtract is a from developers at Google that makes it easy to turn messy, unstructured text into clean, structured data by leveraging LLMs. Users can provide a few few-shot examples along with a custom schema and get results based on that. It works both with proprietary as well as local LLMs (via Ollama).  A significant amount of data in healthcare is unstructured, making it an ideal area where a tool like this can be beneficial. Clinical notes are long and full of abbreviations and inconsistencies. Important details such as drug names, dosages, and especially adverse drug reactions (ADRs) get buried…

Workday, a high-profile HR and finance software solutions maker, is the latest victim of a string of data breaches orchestrated by the resurgent ShinyHunters threat group through Salesforce’s CRM solution, joining a lineup of targets that includes Google, Qantas, Pandora, and Adidas. The post Workday Latest Company Hit by Third-Party CRM Platform Breach appeared first on Security Boulevard.

UBS Global Research reportedly advised investors looking at the artificial intelligence industry to keep an eye on overheating risk and the health of the asset class. UBS strategists wrote this in a Monday (Aug. 18) note in which they said private credit lenders are becoming an important source of capital for the industry, Bloomberg reported Monday. Private debt loaned to the technology sector increased by $100 billion over the past 12 months, reaching a total of $450 billion, while business development companies’ tech lending leapt from $80 billion to $150 billion, the UBS note said, per the report. The demand…

In brief KindlyMD said it was merging with Nakamoto Holdings to become a Bitcoin treasury back in May. The company just closed a $200 million convertible note offering. KindlyMD is the latest firm to pivot to Bitcoin buying as a way to provide better returns for investors. Bitcoin treasury KindlyMD has closed a $200 million convertible note offering that it will use to buy more BTC, the company announced Monday. The issuance is the latest step in the company’s strategy to build its BTC holdings and adds to the $540 million that the company raised via a private placement in public…

Data Engineering for Cybersecurity sets out to bridge a gap many security teams encounter: knowing what to do with the flood of logs, events, and telemetry they collect. About the author James Bonifield has a decade of experience analyzing malicious activity, implementing data pipelines, and training others in the security industry. He has built enterprise-scale log solutions, automated detection workflows, and led analyst teams investigating major cyber threat actors. Inside the book The book is organized into four parts. The first, “Foundations of Secure Data Engineering,” introduces core concepts like getting data into a SIEM, managing throughput, and standardizing events.…

Microsoft warns that a fake ChatGPT desktop app was used to deliver PipeMagic malware, linked to ransomware attacks exploiting a Windows zero-day. Cybersecurity researchers at Microsoft discovered a new backdoor called PipeMagic while investigating attacks that abused a zero-day flaw in Windows CLFS (CVE-2025-29824). What makes this backdoor dangerous is how it poses as a legitimate open-source ChatGPT desktop application while delivering a framework for running ransomware operations. PipeMagic relies on a modular design that loads different components as needed. These modules handle everything from command-and-control communication to payload execution, all while staying hidden through encrypted named pipes and in-memory…

AI for Cybersecurity: Building Trust in Your Workflows Pierluigi Paganini August 18, 2025 In cybersecurity, speed matters, but trust is crucial. AI must ensure both rapid response and reliable decisions to avoid errors and disruption. In cybersecurity, speed matters. But speed without trust can be just as dangerous – if not more so – as no action at all. A hasty, inaccurate decision can disrupt critical systems, cause unnecessary downtimes, and erode confidence in your security operations. That’s why AI in cybersecurity is about more than just faster detection and response; it’s about building trust into every decision the system…

A newly discovered vulnerability, CVE-2025-41688, allows a highly privileged remote attacker to bypass all sandbox restrictions in a widely used OT remote access device. The device is trusted in European industrial environments for maintaining PLCs (programmable logic controllers), HMIs (human-machine Interface), and field equipment. The flaw can be exploited through an undocumented Lua runtime command that enables execution of arbitrary operating system commands as root. “Under the hood, it runs embedded Linux, exposes a web interface, and offers Lua scripting for automation and diagnostics,” Marcel Rick-Cen, an OT and IIoT security consultant, wrote in a Medium post last week. “A…

A disaster recovery plan is essential for businesses operating remote or hybrid workforces. The need for these plans has increased as more companies shift to decentralized teams. Remote employees are across different locations, which creates unique challenges in protecting data and maintaining operations during disruptions like cyberattacks or natural disasters. A well-designed recovery plan ensures — no matter where employees are — that the organization can respond quickly to emergencies, minimize downtime and safeguard sensitive information. Prioritizing disaster recovery planning helps businesses stay resilient and prepared for the unexpected. Remote Access and Connectivity One of the biggest challenges for remote…