Author: HackWatchit

how our job will evolve or even exist than now with the emergence of AI Agents. But let me be upfront that AI tools don’t change the fundamental job of the PM, which is to identify the important problems to solve and guide the best ideas to implementation. AI Agents can definitely augment and, in some cases, replace certain activities, and that is a good thing. Don’t give in to alarmist narratives of how your job will be negatively impacted. Each PM role is unique. While we share common aspects: create product concepts, define requirements, iterate with customers, GTM, the…

Sean Plankey, the nominee to lead the Cybersecurity and Infrastructure Security Agency, glided through a relatively uncontroversial nomination hearing last week, but his path to confirmation in the Senate remains murky due to one senator’s hold. Plankey testified alongside several other nominees before the Senate Homeland Security and Governmental Affairs Committee last week. Plankey is currently serving as a senior adviser at the Coast Guard while he awaits Senate confirmation. Committee Ranking Member Gary Peters (D-Mich.) pressed Plankey on how he would ensure CISA fulfills its mission while facing steep workforce losses and budget cuts under the Trump administration. Plankey…

European defence giant Naval Group has confirmed that it is investigating an alleged cyber attack which has seen what purports to be sensitive internal data published on the internet by hackers.Naval Group builds and maintains an array of ships and submarines for the French navy, including aircraft carriers and nuclear submarines. It counts several foreign navies amongst its customers including India and Brazil.As such, a security breach against the defence contractor should be considered a concern for not just France’s national security, but that of other nations as well.The alleged breach first came to light after a hacker calling themselves…

A vulnerability in Google’s Gemini CLI allowed attackers to silently execute malicious commands and exfiltrate data from developers’ computers using allowlisted programs. The flaw was discovered and reported to Google by the security firm Tracebit on June 27, with the tech giant releasing a fix in version 0.1.14, which became available on July 25. Gemini CLI, first released on June 25, 2025, is a command-line interface tool developed by Google that enables developers to interact directly with Google’s Gemini AI from the terminal. It is designed to assist with coding-related tasks by loading project files into “context” and then interacting with…

Webcam hacking through phishing and malware is more common than you might realize. Camfecting can allow hackers to gain unauthorized access to your webcam or smartphone camera, turning a casual video chat into a serious breach of digital privacy. So, what is webcam hacking, and how does it happen? Cybercriminals deploy malware hidden in phishing emails with file attachments or exploit a cross-site scripting bug. They then install Remote Access Trojans (RATs) to spy on you or use your camera as a backdoor into your network. Fortunately, there are simple steps you can take to prevent webcam hacking and protect…

A highly “aggressive” cyber campaign, identified in mid-2025 by Google’s Threat Intelligence Group (GTIG), is posing a severe threat to major industries, including retail, airlines, and insurance. This sophisticated operation is attributed to Scattered Spider, a financially motivated hacking group also known as 0ktapus and UNC3944, which has been involved in high-profile breaches, including those affecting UK retail giants M&S, Harrods, and Co-op. Although several members of the group have been arrested and charged in the United States and the United Kingdom over attacks on MGM Resorts and major retailers, the group remains highly active and continues to demonstrate a…

For all the excitement around LLMs, practical, engineering-focused guidance remains surprisingly hard to find. LLM Engineer’s Handbook aims to fill that gap. About the authors Paul Iusztin is a Senior AI Engineer and founder of Decoding ML, a channel for content on learning how to design, code, and deploy production-grade ML. Maxime Labonne is the Head of Post-Training at Liquid AI, and He holds a Ph.D. in Machine Learning from the Polytechnic Institute of Paris. Inside the book The authors walk you through how to design, build, and deploy a production-grade LLM application, specifically an “LLM twin” that writes in…

When you’re just starting out, it can be hard to know what makes a great workplace, but the good news is — the clues are often right in the job description. Job listings with buzzwords like “we work hard and play hard”, “thrive in high-pressure environments” often translate to poor work-life balance and unrealistic expectations — run the other way. Instead, you want to keep an eye on companies that emphasize mentorship, support, and growth opportunities. But how can you tell if it’s not spelled out? In this issue, I break down the green flags to look for in job…

Critical WordPress Post SMTP plugin flaw exposes 200K+ sites to full takeover Pierluigi Paganini July 28, 2025 Critical vulnerability in Post SMTP plugin risks full site takeover, over 400k sites use it, and nearly half remain unpatched. A critical vulnerability, tracked as CVE-2025-24000 (CVSS of 8.8) in the Post SMTP WordPress plugin, used by 400k sites, allows full site takeover. The plugin Post SMTP is an email delivery plugin that allows site owners to configure custom mailer services, and includes tooling such as email logging, DNS validation, and OAuth support to make email sending through WordPress easier. Saad Iqbal of WPExperts…