Author: HackWatchit
OpenAI, a leading artificial intelligence company, has revealed it is actively fighting widespread misuse of its AI tools by malicious groups from countries like China, Russia, North Korea, and Iran. In a new report released earlier this week, OpenAI announced it has successfully shut down ten major networks in just three months, demonstrating its commitment to combating online threats. The report highlights how bad actors are using AI to create convincing online deceptions. For instance, groups connected to China used AI to post mass fake comments and articles on platforms like TikTok and X, pretending to be real users in…
promises of retrieval-augmented generation (RAG) is that it allows AI systems to answer questions using up-to-date or domain-specific information, without retraining the model. But most RAG pipelines still treat documents and information as flat and disconnected—retrieving isolated chunks based on vector similarity, with no sense of how those chunks relate. In order to remedy RAG’s ignorance of—often obvious—connections between documents and chunks, developers have turned to graph RAG approaches, but often found that the benefits of graph RAG were not worth the added complexity of implementing it. In our recent article on the open-source Graph RAG Project and GraphRetriever, we…
Sierra Ward & Staff // Buying gifts can be tough, especially for your family members who are totally mystified by your profession. “Don’t you hack the stuff with the things?” Have no fear, BHIS is here (you can forward this on to them for a reference)! I’ve asked around and this list is infosecker approved. I hope our testers didn’t think I was asking because I was going to buy them things… Mr. Robot (Seasons 1 & 2) – Ahhhh…. binge watching, isn’t that what short winter days are for? And if not short winter days, then definitely holiday vacations…
As part of its ongoing commitment to advancing innovation and the safe adoption of new technologies for maritime and critical infrastructure, cybersecurity solutions company Cydome has joined the prestigious NVIDIA Inception Program, which supports AI ventures driving industry transformation. The collaboration with NVIDIA will help keep Cydome’s customers protected even from the latest AI threats and enable safe adoption of new AI use cases, as the industry becomes more digital and advanced. NVIDIA Inception is a program designed to help startups accelerate technical innovation and business growth at all stages. Inception is free and supports members of its global community…
In brief SEC and Ripple have filed a joint motion to dissolve the injunction and release escrowed funds. The latest proposal would see $50M paid to the SEC and the remainder returned to Ripple. The two are trying to wind down a case that began in 2020, centered on XRP sales as alleged unregistered securities. The Securities and Exchange Commission and Ripple Labs have jointly asked a Manhattan federal court to dissolve a prior injunction and release $125 million currently held in escrow, according to a filing made Thursday in the Southern District of New York.Under the proposal, Ripple would…
Update June 12, 17:41 EDT: In new updates, Cloudflare said that all services have been restored and are now fully operational, while Google stated it expects “recovery to complete in less than an hour.” Update June 12, 15:29 EDT: Cloudflare says its services were impacted by Google Cloud’s outage. “This is a Google Cloud outage. A limited number of services at Cloudflare use Google Cloud and were impacted. We expect them to come back shortly. The core Cloudflare services were not impacted,” a Cloudflare spokesperson told BleepingComputer. “Cloudflare services are recovering quickly around the globe. WARP and Turnstile are operational, though a…
Late last year, security researchers made a startling discovery: Kremlin-backed disinformation campaigns were bypassing moderation on social media platforms by leveraging the same malicious advertising technology that powers a sprawling ecosystem of online hucksters and website hackers. A new report on the fallout from that investigation finds this dark ad tech industry is far more resilient and incestuous than previously known. Image: Infoblox. In November 2024, researchers at the security firm Qurium published an investigation into “Doppelganger,” a disinformation network that promotes pro-Russian narratives and infiltrates Europe’s media landscape by pushing fake news through a network of cloned websites. Doppelganger…
The LockBit ransomware-as-a-service (RaaS) operation has netted around $2.3 million USD within 5 months, the data leak stemming from the May 2025 hack of a LockBit affiliate panel has revealed. From that sum, the operators took their 20% cut (approximately USD 456,000), and they additionally “earned” some $10,000-$11,000 USD from affiliates that registered through the panel. “What this leak truly shows is the complex and ultimately less glamorous reality of their illicit ransomware activities. While profitable, it’s far from the perfectly orchestrated, massively lucrative operation they’d like the world to believe it is,” Trellix researchers noted. (The US DoJ previously…
Joff Thyer // It is no secret that PowerShell is increasingly being used as an offensive tool for attack purposes by both Red Teamers and Criminals alike. Thanks to the efforts of a number of people in the industry, we have tools like PowerSploit, PowerShell Empire, MailSniper, and Bloodhound just to name a few of the top contenders. While most of these tools are definitely post-exploitation in nature, the ability of Red Teamers, and attackers to trivially social engineer end users provides an easy path to extensive PowerShell usage. Windows 7 is still prevalent in enterprise environments with the…