Author: HackWatchit

If you’re trying to make sense of how to actually build AI agents, not just talk about them, AI Agents in Action might be for you. About the author Michael Lanham, Lead AI Developer at Brilliant Harvest, is a seasoned software and technology innovator with more than 25 years of industry experience. He is the author of 10 books, including Evolutionary Deep Learning. Inside the book Micheal Lanham’s latest book is not an abstract discussion about AI futures or lofty concepts. It’s a toolkit in print, aimed at developers and technical leaders who want to build real systems using language…

I the chance to create an MCP server for an observability application in order to provide the AI agent with dynamic code analysis capabilities. Because of its potential to transform applications, MCP is a technology I’m even more ecstatic about than I originally was about genAI in general. I wrote more about that and some intro to MCPs in general in a previous post. While an initial POCs demonstrated that there was an immense potential for this to be a force multiplier to our product’s value, it took several iterations and several stumbles to deliver on that promise. In this…

BB King // We got an email from a fan today asking how best to find a mentor in information security. Maybe you’re looking for a mentor too. It’s a great question. Much of the advice you see for people looking to make their start in infosec is something like, “Work at the helpdesk or in system administration for a while.” This gives you a chance to see computer systems and networks at work in the real world, and to experience their limitations first-hand. It’s good advice. The only problem with it is that there is no clear signal telling…

Fake AI-powered video generation tools are being used to distribute a new information-stealing malware family called ‘Noodlophile,’ under the guise of generated media content. The websites use enticing names like the “Dream Machine” and are advertised on high-visibility groups on Facebook, posing as advanced AI tools that generate videos based on uploaded user files.  Although the use of AI tools to deliver malware isn’t a new concept and has been adopted by experienced cybercriminals, the discovery of the latest campaign by Morphisec introduces a new infostealer into the mix. According to Morphisec, Noodlophile is being sold on dark web forums,…

Discussions around the personal enrichment and potential conflict of interest arising from U.S. President Donald Trump’s crypto asset ventures gained steam over the past week. These concerns are slowing not only the progress of the stablecoin legislation but also broader crypto policy. The founder of fintech venture capital fund Launchpad Capital, Ryan Gilbert, told CNBC:“It’s unfortunate that personal business is getting in the way of good policy…I would hope that everybody in the administration, including the president, gets out of the way of good policy.”The stablecoin legislation, known as the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act, aims…

Taking the Helm: The Essential Elements of Non-Human Identities and Secrets Security Management Are we doing enough to safeguard our digital assets? We cannot overlook the strategic importance of Non-Human Identities (NHIs) and Secrets Security Management. This pivotal methodology closes the widening security gaps that persist between R&D and the security teams, enhancing cloud security across several businesses and industries. The Blueprint of NHIs and the Importance of Secrets What exactly are Non-Human Identities? These are unique machine identities employed in cybersecurity measures. They minimize chances of breaches by marrying an encrypted ‘Secret’ that works as a unique identifier to…

PwC and Cynalytica announced on Wednesday a partnership that marks a significant evolution in how critical infrastructure organizations secure legacy and hybrid operational technology (OT) environments.With industrial sectors facing increased cyber-physical risk and regulatory pressure, the collaboration brings together PwC’s global leadership in ICS/OT cybersecurity and Cynalytica’s breakthrough technology that provides passive, real-time visibility into analog, serial, and Ethernet-based communications, an ICS/OT blind spot long ignored by traditional solutions.  “OT threats are evolving fast, targeting overlooked vulnerabilities in legacy infrastructure. As IT and OT systems converge, organisations need to move quickly to stay resilient,” Clinton Firth, Cybersecurity and Digital Trust…

April was an event-filled month for cybersecurity. Patch Tuesday came to us quickly on April 8 – the earliest first Tuesday possible in a given month. We again saw large numbers of CVEs addressed with 84 in Windows 11 and 87 in Windows 10 and all their related servers. There was only one known-exploited exploited vulnerability, CVE-2025-29824, which allowed elevation of privilege but it was present in all operating systems. Overall, a pretty typical monthly event. A bit of chaos ensued in the following weeks with the announcement that MITRE would no longer be supporting the CVE Program due to…

Podcast: Play in new window | DownloadSubscribe: Apple Podcasts | Spotify | Amazon Music | Dakota Nelson // Dakota talks about the pentester pyramid of pain and the different types of tests available from an information security firm. See his slides here: https://blackhillsinformationsecurity.shootproof.com/gallery/7404264/ Extra links & notes: From guest blog post by Scott Worden: Having the penetration tester reach your crown jewels, get root, own you, pwn you, own3d, 0wn3d, pwned, pooned or whatever phrasing you use is NOT a failure. The point of a penetration test is to find where you are vulnerable so you can improve. There is no…