Author: HackWatchit

Well-written documentation is crucial for almost any data science project as it enhances clarity, facilitates collaboration, and ensures reproducibility. Clear and concise documentation provides context for the project’s objectives, methodologies, and findings, making it easier for other team members (especially, newbies) and stakeholders to understand the meaning behind work done. Furthermore, documentation serves as a reference for future enhancements or troubleshooting, reducing time spent on re-explaining or even refreshing the main concepts.  Sounds attractive, isn’t it? But do you know that you can create functional documentation via Sphinx documentation tool in a consistent style simply by using docstrings? If you…

John Malone is a penetration tester for Black Hills Information Security. He regularly performs external, internal, and social engineering-based assessments. His favorite tools are confidence and charisma. When most people think of a hacker, they probably imagine someone in a hoodie on a computer, basking in the light of a green-on-black terminal. While (somewhat) true, many people don’t directly associate phone-based attacks as something that hackers typically do. But say that a hacker picks up their phone, calls a victim, and convinces them to run a malicious binary or click a link. What is this called? I’ll tell you. It’s…

In brief Thailand will waive capital gains taxes on crypto sales through licensed platforms from 2025 to 2029. The move is part of a broader push to position the country as a global digital asset hub. Experts say Thailand’s crypto holdings could surge, but platform access restrictions may limit foreign participation. Thailand has eliminated capital gains taxes on crypto sales for the next five years, marking the Southeast Asian nation’s most aggressive push yet to position itself as a premier global financial hub for digital assets.The Thai Cabinet approved the sweeping tax exemption on Tuesday, waiving personal income taxes on…

Episource warns of a data breach after hackers stole health information of over 5 million people in the United States in a January cyberattack. Episource is an American healthcare services company that provides risk adjustment, medical coding, data analytics, and technology solutions to health plans and providers. They help insurers optimize payments and compliance in government programs like Medicare Advantage. In a data breach notification on its website, Episource says it detected unusual activity on its systems on February 6, 2025. An investigation revealed that hackers accessed and exfiltrated sensitive data stored on these systems between January 27 and the…

U.S. Transportation Secretary Sean P. Duffy announced yesterday at the Paris Air Show that the Federal Aviation Administration (FAA) is working with aviation authorities from Australia, Canada, New Zealand, and the United Kingdom on a collaborative roadmap to support the safe development and integration of advanced air mobility (AAM) technologies. The roadmap aims to align aircraft certification standards and reduce regulatory redundancies across the participating countries. “eVTOLs and all kinds of futuristic advanced air mobility vehicles will redefine how we transport goods and people. As we’ve done for decades, the United States is working with our great international partners to…

[New York, US, 06/18/25] AdaCore, which provides software development tools for mission-critical systems, and embedded software security company CodeSecure, today announced a definitive merger agreement. The merger creates a unified company committed to advancing software safety, security, and reliability across critical industries. The merger combines two highly complementary portfolios: AdaCore’s expertise in high-integrity software development for defense, aerospace, rail, and automotive applications, and CodeSecure’s application security testing solutions, including advanced static analysis capabilities that identify and mitigate vulnerabilities in embedded systems. Franco Gasperoni, currently CEO of AdaCore, will serve as CEO of the newly combined company. Under his leadership, the…

A new report from Virtual Routes highlights that many critical infrastructure entities across Europe remain ill-prepared to defend against cyber threats. Despite their essential role in society, these organizations often lack the funding, skilled personnel, and technical capabilities needed to meet growing regulatory demands. The report spotlights the drinking water and wastewater sectors, documenting a sharp rise in cyber incidents targeting these installations across Europe and beyond. These include ransomware attacks, credential breaches, and attempts to sabotage treatment processes, with risks compounded by weak remote access controls, outdated systems, and poor asset visibility. The report, titled ‘Under Pressure: Securing Europe’s…

Jumio launched Jumio Liveness Premium with advanced deepfake detection, the company’s most advanced biometric liveness detection solution to date. Jumio’s premium solution leverages a patented Jumio technology, combining randomized color sequences and AI-driven analysis to confirm human presence in real time, effectively stopping spoofing attacks before they impact businesses. With this release, Jumio adds another layer of security to the recently launched Jumio Liveness, an advanced, in-house liveness detection technology that expands beyond traditional presentation attacks, such as paper or screen copies, and employs sophisticated AI models to block advanced threats like injection attacks and deepfakes. Enabled customers using this…

So, I have passed the timeframe where I have been actively penetration testing for over a decade…. I have a large number of pretty strongly held beliefs on penetration testing and I thought it would be fun to walk through how I came to those conclusions and got angry, bitter and highly protective of my ideas and private property. Yes… This seems like a perfectly logical trajectory for me at this point One of the things I am a bit harsh on is how many testers these days are focused on scanning and simply looking for red vulnerabilities. A long…