Author: HackWatchit

Mattel, the toy giant that has been shaping childhoods for generations, announced in a June 12 press release a headline-grabbing partnership with OpenAI. The plan is to bake artificial intelligence into the DNA of Mattel’s most iconic toys, from Barbie to Hot Wheels. The move is bold, futuristic and, in the eyes of some parents and privacy advocates, somewhat unnerving. In Mattel’s design studios, AI is already revolutionizing how toys are imagined. Designers feed prompts into generative AI tools, conjuring up dozens of new characters and playsets in the time it used to take to sketch one. Prototypes are tested…

This is the third article in a short series on developing data dashboards using the latest Python-based development tools, Streamlit, Gradio and Taipy. The source data set for each dashboard is the same, but stored in different formats. As much as possible, I’ll try to make the actual dashboard layouts for each tool resemble each other and have the same functionality. I’ve already written the Streamlit and Gradio versions. The Streamlit version gets its source data from a Postgres database. The Gradio and Taipy versions get their data from a CSV file. You can find links to those other articles…

Brian Fehrman // There are numerous methods that have been published to bypass Anti-Virus products. As a result, many companies are beginning to realize that application whitelisting is another tool to consider adding to their arsenal. Application whitelisting is advantageous in that it doesn’t require constant updating of behavioral or signature-based detection algorithms; you explicitly tell it what can be run. Here, we will show you one method of bypassing some application whitelisting products. Right up front, we will make it known that we did not develop this method. This method was developed by Casey Smith. We stumbled upon it…

CVE-2024-39914 is a critical unauthenticated command injection vulnerability in FOG Project version ≤ 1.5.10.34. The flaw exists in how the filename parameter is processed by export.php, allowing attackers to inject arbitrary system commands. This can be used for immediate command execution or to drop a persistent PHP webshell for follow-up exploitation. CVE ID: CVE-2024-39914 Severity: Critical CVSS Score: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) EPSS Score: 92.67% Affected Versions: ≤ 1.5.10.34 Patched Version: 1.5.10.35 Authentication Required: No Impact: Remote Command Execution Technical Breakdown The export.php script within the fog/management/ directory includes logic that passes the filename parameter to a backend system command, likely using…

across Fortune 500 companies, executives are grappling with the same question: How do we harness AI’s potential without falling behind competitors who seem to be moving faster? The AI discourse presents conflicting signals: some experts warn of over-hype while vendors flood the market with agent platforms and vertical AI solutions. Job displacement predictions swing wildly from 50% of white-collar jobs being eliminated to zero jobs lost. The answer lies in understanding a critical distinction that most leaders are missing: the difference between two fundamentally different approaches to AI adoption. Efficiency AI: the safe path of automating existing workflows and boosting…

Sierra Ward & Ethan Robish // Intro by Ethan: Sierra came up with the idea to interview me for this blog.  I thought it was a great idea and after watching Rick and Gail’s dynamic on the video they created the other day, I thought it could be really fun too.   Our attempts at recording video failed.  Our attempts at recording audio mostly failed.  We got an audio recording that was akin to talking through these: So instead you will find the transcript of our conversation. __________ S: Hi Ethan, how are you? E: Hi, I’m doing great. How are you,…

In this Help Net Security interview, Dr. Tim Sattler, CISO at Jungheinrich, discusses the cybersecurity risks tied to smart warehouses and industrial control systems. He explains how to maintain operational continuity while building real cyber resilience in always-on environments. Dr. Sattler also shares practical strategies for working with third-party partners and preparing for the next wave of automation. What unique cybersecurity challenges arise from smart warehouse systems and industrial control systems? Smart warehouses incorporate a range of technologies, from programmable logic controllers (PLCs) and warehouse management systems to autonomous mobile robots and IoT-enabled forklifts. While these innovations optimise throughput and…

American grocery wholesale giant United Natural Foods (UNFI) reports that it has restored its core systems and brought online the electronic ordering and invoicing systems affected by a cyberattack. UNFI, which is also a primary distributor for Amazon’s Whole Foods, said in a Thursday update that the incident has been contained and that it’s now delivering products to stores at “more normalized levels.” In a separate 8-K filing with the U.S. Securities and Exchange Commission, the grocery distributor said it believes the incident is also “reasonably likely” to have a material impact on its net income/(loss) and adjusted EBITDA for…

Never miss a new edition of The Variable, our weekly newsletter featuring a top-notch selection of editors’ picks, deep dives, community news, and more. Is one really the loneliest number? When it comes to AI agents, the answer is likely “it depends.” For simple and narrowly scoped workflows, sticking to a single-agent setup can help you keep things tidy and efficient. It’s hard to ignore, however, just how many more possibilities open up when you start combining the power of multiple agents. To help you reap the benefits of multi-agent systems without adding unnecessary complexity or clunkiness, don’t miss the lineup…