Author: HackWatchit

Joff Thyer // Information Security professionals often have reason to analyze logs. Whether Red Team or Blue Team, there are countless times that you find yourself using “grep”, “tail”, “cut”, “sort”, “uniq”, and even “awk”! While these powerful UNIX methods take us far, there is always that time when you want more power! In this webcast, we discuss using Python regular expressions, and dictionaries to extract useful data for frequency analysis. If you want to learn even more about Python, join Joff for SEC573: Automating Information Security with Python at SANS Northern Virginia in Reston starting May 21st, 2017 You…

ChatGPT’s memory feature is now better and capable of referencing past conversations for free accounts. In an update to its support document, OpenAI quietly confirmed that it has rolled out a new version of Memory that better remembers and references your past conversations. This feature was previously available for paid subscribers, but it’s rolling out to everyone today. “On June 03, 2025, we’re starting to roll out memory improvements to logged in Free users,” OpenAI wrote in a support document. With the new Memory feature, ChatGPT is capable of saving conversations for a longer period. For example, if you’ve instructed…

Coral Protocol on Building the Internet of Agents for a Collaborative AI Economy As the age of siloed AI agents fades, a new paradigm is emerging, one where intelligent agents don’t just execute, but collaborate. Coral Protocol is pioneering this vision with infrastructure for decentralized agent communication, orchestration, and trust. We sit down with Roman Georgio and Caelum Forder, co-founders of Coral Protocol, to dive deep into the architecture powering the Internet of Agents, and why tomorrow’s AI economy will need more than just better models, it’ll need better cooperation. Ishan Pandey: Hi Roman, hi Caelum, great to have you…

In this Help Net Security interview, Thomas Squeo, CTO for the Americas at Thoughtworks, discusses why traditional security architectures often fail when applied to autonomous AI systems. He explains why conventional threat modeling needs to adapt to address autonomous decision-making and emergent behaviors. Squeo also outlines strategies for maintaining control and accountability when AI agents operate with increasing autonomy. Why do traditional security architectures expecting predictable behavior fail when applied to autonomous AI systems? Autonomous AI systems, specifically agentic generative AI, differ fundamentally. These systems make their own inferences and decisions based on statistical patterns learned from data. They operate…

AI agents are no longer just experiments — they’re becoming embedded in the way modern enterprises operate. From processing transactions to coordinating logistics, agents are increasingly acting on behalf of people and systems. But here’s the catch: The infrastructure that governs their identity hasn’t caught up. AI agents don’t run in a neat, uniform environment. They exist across public clouds, private datacenters, disconnected networks — even on ships and factory floors. Yet the way we authenticate, authorize, and govern them still assumes a centralized, cloud-connected world. Here are the six critical problems emerging as enterprises scale AI agents across hybrid…

Compliance automation provider Vanta confirms a software bug exposed private customer data to other users, impacting hundreds of clients. Learn about the details of this critical security incident. Vanta, a company known for helping businesses manage their security and compliance, has admitted to a major cybersecurity-related issue. A software error caused the company’s private customer information to be shared with other Vanta clients. This incident, caused by a recent change in the company’s product code, has affected hundreds of organizations, raising questions about data safety in specialized compliance platforms. What Happened and Who Was Affected? The issue was first found…

Google fixed the second actively exploited Chrome zero-day since the start of the year Pierluigi Paganini June 03, 2025 Google addressed three vulnerabilities in its Chrome browser, including one that it actively exploited in attacks in the wild. Google released out-of-band updates to address three vulnerabilities in its Chrome browser, including one, tracked as CVE-2025-5419, that is actively exploited in the wild. The vulnerability is an out-of-bounds read and write in the V8 JavaScript engine in Google Chrome prior. An attacker can exploit the flaw to trigger a heap corruption via a crafted HTML page. Clement Lecigne and Benoît Sevens…

Sally Vandeven // OR How to Pentest with AD Explorer! Mark Russinovich’s Sysinternals tools (Microsoft) are nothing new. They have been a favorite among system administrators for many, many years. Maybe a little less known is that they are super helpful for pentesters too! One of my favorites is AD Explorer. My colleague Dave Fletcher, who has worn many hats including that of sysadmin extraordinaire, reminded me of this tool on an engagement and I have been using it on internal assessments faithfully ever since. Of course for organizations that expose domain controllers on the Internet this could be useful…

Randall “Randy” Murch, a respected national security advisor, former FBI agent and executive, and widely recognized expert in biosecurity and forensics, passed away on May 28, 2025, aged 72 due to health issues, according to his family. In a heartfelt message shared with HSToday, his family remembered him as “our hero, a mentor to many,” noting that he “impacted the lives of almost everyone that he came in contact with over the years.” While the Murch family mourns the loss of a beloved father and friend, they also celebrate a life dedicated to public service, scientific advancement, and mentorship. Murch’s…