Author: HackWatchit

On September 2, 2025, a GitHub user known as Grommash9 committed a new workflow file to the FastUUID project. The file, labelled “Github Actions Security,” appeared similar to routine automation scripts but was later found to contain malicious code designed to collect CI/CD secrets and send them to an external server. FastUUID is an open-source Python library used in generating and working with universally unique identifiers (UUIDs) efficiently. By September 5, cybersecurity researchers at GitGuardian had spotted the unusual activity and confirmed the FastUUID repository had been compromised. The workflow contained a command that packaged secrets into an HTTP POST…

Read More

Qantas cuts executive bonuses by 15% after a July data breach Pierluigi Paganini September 06, 2025 Qantas cuts executive bonuses by 15% after a July cyberattack exposed data of 5.7M people, despite reporting $1.5B profit last fiscal year. Qantas cuts executive bonuses by 15% after a July cyberattack that exposed data of 5.7M people, despite posting $1.5B profit in the last fiscal year. This case study demonstrates that a security breach could impact the salaries and bonuses of C-Executives. In early July, Australian airline Qantas disclosed a cyberattack after hackers accessed a third-party platform used by a call centre, stealing significant customer…

Read More

Ever seen a job application that made you stop scrolling — and maybe even laugh out loud? I did recently when I came across this young woman applying to OLIPOP. She called it her official “thirst trap” and presented her Social Media Manager skills in a bold, hilarious, and totally unconventional way. I couldn’t help but follow along to see what would happen. Her post ended up with 12.5K reactions and 1K+ comments on LinkedIn. Creative, attention-grabbing, and undeniably viral, but do these stunts actually land jobs? Every once in a while, I come across these wild applications — Candidates…

Read More

VirusTotal has discovered a phishing campaign hidden in SVG files that create convincing portals impersonating Colombia’s judicial system that deliver malware. VirusTotal detected this campaign after it added support for SVGs to its AI Code Insight platform. VirusTotal’s AI Code Insight feature analyzes uploaded file samples using machine learning to generate summaries of suspicious or malicious behavior found in the files. After adding support for SVGs, VirusTotal found an SVG file that had zero detections by antivirus scans, but whose AI-powered Code Insight feature detected using JavaScript to display HTML, impersonating a portal for Colombia’s government judiciary system. VirusTotal Code insights detecting a…

Read More

Google DeepMind introduced a new artificial intelligence model that captures the vivid details of the Earth’s surface, which helps scientists and governments make better decisions about the land and sea. Called AlphaEarth Foundations, the geospatial AI model pulls together satellite images and other environmental data to create a single picture of the planet, according to a blog post. Satellites orbiting Earth collect large amounts of information every day. While this data is valuable, it’s often stored in many different formats and comes from different times and sensors, making it hard to combine. AlphaEarth Foundations acts like a “virtual satellite” that…

Read More

exploring features in the OpenAI Agents SDK framework, there’s one capability that deserves a closer look: input and output guardrails. In previous articles, we built our first agent with an API-calling tool and then expanded into a multi-agent system. In real-world scenarios, though, building these systems is complex—and without the right safeguards, things can quickly go off track. That’s where guardrails come in: they help ensure safety, focus, and efficiency. If you haven’t read the earlier parts yet, no worries — you’ll find links to the previous articles at the end of this post. Here’s why guardrails matter: Prevent misuse…

Read More

In the world of cybersecurity, the adage “a fool with a tool is still a fool” serves as a potent reminder that technology alone, no matter how advanced, cannot compensate for weak processes or a lack of strategic planning. In an era where artificial intelligence (AI) and machine learning (ML) are heralded as game-changers, it is crucial to recognize that without solid foundational IT processes—particularly in configuration and change management—organizations will remain vulnerable to breaches. The Myth of the Next Big Thing Every year, a new cybersecurity tool or technology emerges, promising to be the ultimate solution to all cybersecurity…

Read More

If you have a Peacock subscription and travel abroad, you’ll find you can no longer stream content like Bel-Air, Resident Alien, and Yellowstone. Instead, you’ll see an error message, or you’ll be redirected to NBC’s Universal website. This is a result of NBC protecting its existing licensing agreements. To do so, it ensures content is region-locked outside the US. A Virtual Private Network (VPN) can help you get around Peacock’s geo-blocking. When you connect to a VPN server in the US, your traffic is encrypted and you’re assigned a new, temporary address. This makes it look as if you’re accessing Peacock from the US, helping…

Read More