Author: HackWatchit

I explain how to build an app that generates multiple choice questions (MCQs) on any user-defined subject. The app is extracting Wikipedia articles that are related to the user’s request and uses RAG to query a chat model to generate the questions. I will demonstrate how the app works, explain how Wikipedia articles are retrieved, and show how these are used to invoke a chat model. Next, I explain the key components of this app in more detail. The code of the app is available here. App Demo App Demo The gif above shows the user entering the learning context,…

John Strand // In this webcast John covers how to set up Active Directory Active Defense (ADAD) using tools in Active Defense Harbinger Distribution (ADHD) and talks about potential active defense laws like Active Cyber Defense Certainty (ACDC). He shows how to create honey accounts, create callback word documents, and create fake SMB shares! All for free. Slides for this webcast are here: https://www.dropbox.com/s/m8c6msdfhbqc63i/HoneyAdmin_AndShare.pptx?dl=0 Available live/virtual and on-demand

Results from Pentera’s 4th Pentesting report, which surveyed around 500 CISOs globally, show that while Exposure Management practices are maturing, there are still some gaps the market is yet to address. The modern attack surface is sprawling, dynamic, distributed, and dangerously opaque. As enterprises expand into cloud-native or hybrid architectures, deploy APIs by the thousands, and integrate IoT and OT devices into core operations, the surface area for cyber threats grows both in size and complexity. Today, the average enterprise manages 75 security tools, and nearly half of CISOs report continued growth in their security stacks year over year. This…

NFTs have provided digital artists with new ways to monetize their work by introducing scarcity to the market, but other creative fields can also benefit, performance art duo Operator told Decrypt.The performing arts have a “similar issue” to digital artists, explained Ania Catherine, who works with collaborator Dejha Ti as Operator. Prior to the advent of NFTs, Catherine said, “Digital artists were in a position of being in a service industry, working for advertising firms, the film industry, for entertainment—and then they would have their digital art on the side.”Performance artists are in an even more challenging position thanks to…

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Vulnerabilities found in NASA’s open source softwareVulnerabilities in open source software developed and used in-house by NASA could be exploited to breach their systems, claims Leon Juranić, security researcher and founder of cybersecurity startup ThreatLeap. NIST proposes new metric to gauge exploited vulnerabilitiesNIST has introduced a new way to estimate which software vulnerabilities have likely been exploited, and it’s calling on the cybersecurity community to help improve and validate the method. What CISOs can learn from the frontlines of fintech cybersecurityAt Span Cyber Security Arena,…

How is Innovation Paving the Way for Improved NHI Management? Innovation stands as the lighthouse amidst the tumultuous sea of evolving threats. But how does this innovation affect Non-Human Identities (NHIs) management, a cornerstone of modern cybersecurity practices? Secure machine identity management is paramount in navigating the treacherous waters of cyber threats, and incremental upgrades in technology play a significant role. Grasping the Intricacies of Non-Human Identities (NHIs) NHIs, often referred to as machine identities, are pivotal components. These identities, combined with a ‘Secret,’ form an essential unit of a secure network. This Secret can be an encrypted password, token,…

Carrie Roberts* // ADVISORY: The techniques and tools referenced within this blog post may be outdated and do not apply to current situations. However, there is still potential for this blog entry to be used as an opportunity to learn and to possibly update or integrate into modern tools and techniques. How does password cracking in the cloud compare to down here on earth? Maybe not as heavenly as imagined. I saw this on the web and got excited: “You can get up and running with a Kali GPU instance in less than 30 seconds. All you need to do…

NEW YORK – A federal judge on Thursday indicated she’s leaning toward issuing an order that would potentially restrict how Department of Government Efficiency agents can access sensitive Office of Personnel Management data systems. But the judge left the door open for the parties in the case to negotiate a resolution that would involve OPM showing it had “tightened” up processes for granting access to sensitive systems compared to the “chaotic” early weeks of the new administration. During a Thursday hearing in federal court, lawyers who filed the lawsuit on behalf of federal employee unions argued for a prohibitory preliminary…

have become more frequent and devastating across the globe, with the effects of climate change in recent decades. In this context, flood modeling has an important role in risk assessment and disaster-response operations, while also remaining a key focus of advanced research and academic studies. In this article, we’ll build a basic flood inundation model using Python and a Digital Elevation Model (DEM). We’ll use a flood fill technique to incrementally simulate how rising water levels affect a landscape and animate the inundation process. It’s a visual and hands-on way to explore geospatial data and flood risks, even without a…