Author: HackWatchit

Models alone aren’t enough; having a full system stack and great, successful products is the key. Satya Nadella – [1]. of specialized models, vision, language, segmentation, diffusion, and Mixture-of-Experts, often orchestrated together. Today the stack spans several types: LLM, LCM, LAM, MoE, VLM, SLM, MLM, and SAM [2], alongside the rise of agents. Precisely because the stack is this heterogeneous and fast-moving, teams need a practical framework that guarantees: rigorous evaluation (factuality, relevance, drift), built-in safety and compliance (PII, policy, red-teaming), and dependable operations (CI/CD, observability, rollback, cost controls). Without a framework, most models simply mean more risk and less…

Former Army Special Operations Intelligence specialist combines battlefield experience with cutting-edge cybersecurity expertise to revolutionize digital inheritance while addressing critical infrastructure vulnerabilities. The cybersecurity landscape demands leaders who understand both technical complexity and operational reality under pressure. Glenn Devitt represents a rare convergence of these capabilities—a former U.S. Army Special Operations Intelligence veteran whose 11 years of military service, including deployments to Iraq and Afghanistan, where he earned two Bronze Star Medals, now drives innovation at the intersection of cybersecurity and digital estate planning. Devitt’s journey from military intelligence to cybersecurity leadership exemplifies how battlefield-tested skills can be applied to…

AI-powered automated penetration testing and red teaming startup FireCompass has announced raising $20 million in a strategic funding round that brings the total raised by the company close to $30 million. The fresh funding came from the Certified Ethical Hacker (CEH) program’s creator EC-Council, as part of its $100M Cybersecurity Innovation Fund. Founded in 2019, the Bengaluru, India-based FireCompass has built a platform that integrates attack surface management, continuous threat exposure management, network and application penetration testing, penetration testing as a service, and red teaming. The agentic AI–driven offensive security platform uses thousands of attack playbooks to run real-world attacks…

DigitalOcean has announced support for Single Sign-On. This integration is designed to provide digital native businesses with secure authentication to their DigitalOcean accounts. DigitalOcean Single Sign-On (SSO) helps to centralize user access and makes user onboarding and offboarding seamless. It’s built on the industry-standard OpenID Connect (OIDC) protocol, ensuring secure and reliable authentication. SSO connects your existing Identity Provider (IdP) to DigitalOcean, starting with Okta and expanding to other leading IdPs in the future. For growing, cloud-native teams, SSO provides secure, frictionless access without added complexity or cost. DigitalOcean includes enterprise-grade control and automated user management in every plan, so…

SVG files used in hidden malware campaign impersonating Colombian authorities Pierluigi Paganini September 05, 2025 VirusTotal uncovered an undetected malware campaign using SVG files that impersonated the Colombian justice system. VirusTotal researchers uncovered a phishing campaign using SVG files with hidden JavaScript to deploy fake Fiscalía General de la Nación login pages in Colombia and spread malware. VirusTotal noticed that, despite being outdated, SWF files are still abused in attacks. In 30 days, VirusTotal logged 47,812 unique SWFs, 466 flagged as malicious. SWFs require unpacking, parsing, and script extraction before analysis. The researchers also highlighted that SVGs remain widely abused…

Background: The Unique Landscape of the Black Hat NOC Operating the Black Hat Security and Network Operations Center (NOC) presents a unique set of challenges and expectations. Unlike a typical corporate environment where any hacking activity is immediately deemed malicious, the Black Hat conference is a nexus for cybersecurity research, training, and ethical hacking. Consequently, we anticipate and even expect a significant volume of activity that, in other contexts, would be considered highly suspicious or outright hostile. This includes various forms of scanning, exploitation attempts, and other adversarial simulations, often conducted as part of official trainings or independent research. Adding…

The Pentagon’s website and social media channels were overhauled Friday at President Donald Trump’s behest to reflect the United States Defense Department’s new “Department of War” persona, shifting from Defense.gov to War.gov—a symbolic rebranding that highlights the administration’s preference for projecting strength through the language of war rather than the idiom of defense.Trump on Friday signed an executive order directing the Pentagon to once again be named the so-called Department of War, reviving a name retired after World War II to mark America’s turn to deterrence as the principle bulwark against nuclear annihilation.At an Oval Office ceremony, Trump said the…

Bridgestone confirms a cyberattack that disrupted manufacturing plants. This article details the impact on employees, expert analysis, and a look at the suspected hacking group, Scattered Lapsus$ Hunters. Tire manufacturing giant Bridgestone, the world’s largest by production volume, has confirmed it is investigating a cyberattack that has impacted some of its manufacturing facilities across North America. The company, which operates in over 150 countries with 50 production plants and 55,000 employees, stated that it believes the incident was limited and has been contained. Reports of the incident first surfaced on Tuesday, September 2, 2025, concerning two production facilities in Aiken…

The chairman of the Federal Trade Commission (FTC) last week sent a letter to Google’s CEO demanding to know why Gmail was blocking messages from Republican senders while allegedly failing to block similar missives supporting Democrats. The letter followed media reports accusing Gmail of disproportionately flagging messages from the GOP fundraising platform WinRed and sending them to the spam folder. But according to experts who track daily spam volumes worldwide, WinRed’s messages are getting blocked more because its methods of blasting email are increasingly way more spammy than that of ActBlue, the fundraising platform for Democrats. Image: nypost.com On Aug.…