Author: HackWatchit

GPT-powered fashion assistant, I expected runway looks—not memory loss, hallucinations, or semantic déjà vu. But what unfolded became a lesson in how prompting really works—and why LLMs are more like wild animals than tools. This article builds on my previous article on TDS, where I introduced Glitter as a proof-of-concept GPT stylist. Here, I explore how that use case evolved into a living lab for prompting behavior, LLM brittleness, and emotional resonance. TL;DR: I built a fun and flamboyant GPT stylist named Glitter—and accidentally discovered a sandbox for studying LLM behavior. From hallucinated high heels to prompting rituals and emotional…

Read More

Google is implementing a new Chrome security feature that uses the built-in ‘Gemini Nano’ large-language model (LLM) to detect and block tech support scams while browsing the web. Tech support scams are malicious websites that trick users into thinking their computer has a virus infection or other problem. These alerts are shown as full-screen browser windows or will display additional pop-ups, making them difficult to close. The goal is to convince the victim to call a listed number for help to either sell unnecessary remote support subscriptions or gain remote access to devices, which can lead to financial losses or data theft. Example…

Read More

Podcast: Play in new window | DownloadSubscribe: Apple Podcasts | Spotify | Amazon Music | John Strand shares some of his own journey into information security and also his ideas and tips for those wanting to get into the industry from the start, or those looking to change career paths mid stream. He’s joined by special guests Randy Marchany, CISO of Virginia Tech & Director of the VA Tech IT Security Lab, and Ed Capizzi, SANS instructor. To see the entire show, plus the slides and all the links mentioned visit the webcast post of this episode here. Available live/virtual…

Read More

Former Federal Deposit Insurance Corp. (FDIC) Board Member Jonathan McKernan will be nominated to serve in a post at the Treasury Department after previously being nominated to lead the Consumer Financial Protection Bureau (CFPB). Treasury Secretary Scott Bessent said in a Friday (May 9) press release that President Donald Trump intends to nominate McKernan to serve as the undersecretary of domestic finance at the Treasury Department. Reuters reported Friday (May 9), citing a White House official, that McKernan will no longer be considered for the position at the CFPB and that a new nominee will be named for that role. The Treasury Department press release said that McKernan has…

Read More

Russia-linked ColdRiver used LostKeys malware in recent attacks Pierluigi Paganini May 09, 2025 Since early 2025, Russia-linked ColdRiver has used LostKeys malware to steal files in espionage attacks on Western governments and organizations. Google’s Threat Intelligence Group discovered LOSTKEYS, a new malware used by Russia-linked APT COLDRIVER, in recent attacks to steal files and gather system info. The ColdRiver APT (aka “Seaborgium“, “Callisto”, “Star Blizzard”, “TA446”) is a Russian cyberespionage group that has been targeting government officials, military personnel, journalists and think tanks since at least 2015. In the past, the group’s activity involved persistent phishing and credential theft campaigns leading to intrusions and…

Read More

VicOne announced xAurient, a new automotive threat intelligence platform that enables streamlined threat response by delivering early threat intelligence tailored to the particular manufacturing environment of an original equipment manufacturer (OEM) or Tier 1 supplier. xAurient illuminates the how and why of developing threats, delivers precise insights into attack paths and enables proactive, prioritized countermeasures to ensure product security for software-defined vehicles (SDVs). VicOne’s new xAurient goes beyond gathering fragmented global threat data to define precise attack paths and provide on-demand threat research services for efficient and effective protection. An automaker’s product cybersecurity personnel are freed to concentrate their efforts…

Read More

PumpSwap, the DEX launched by Solana-based memecoin factory Pump.fun, has hit $100 million in total value locked (TVL), marking a new milestone just 50 days after its debut.The record comes amid a broader resurgence in memecoin trading, defying recent predictions of the sector’s collapse after its meteoric growth fizzled out earlier this year.Volume boomLaunched on March 19, PumpSwap was designed to provide a native trading venue for tokens graduating from Pump.fun’s launchpad.The platform has seen near-continuous growth in daily activity, with cumulative trading volume exceeding $18 billion to date.Daily volumes have rarely dipped below $500 million in May, and the…

Read More

Are You Leaving Your Digital Doors Unlocked? Organizations are increasingly leaning on cloud-based solutions for convenience, scalability, and speed. However, with businesses make the cloud their home, the reality of cybersecurity threats and challenges facing this new frontier remains undeniable. A crucial aspect often overlooked in this journey is the management of Non-Human Identities (NHIs) and Secrets. Unlocking the Power of Non-Human Identities and Secrets Management NHIs and Secrets Management could be likened to the invisible workforce that keeps an organization’s operations secure and efficient. Managing NHIs entails controlling the ‘actors’; the identities, while secrets management involves monitoring their access…

Read More

Staff// We recently received an email from someone working on their degree who had some questions for whichever tester we could round up. They were great questions and since we get asked similar things quite frequently we decided to create a 2-part blog post answering them with the help of several testers. See what they had to say about their own journey and don’t forget to check out Part 2 on Monday! 1)What initially inspired you to pursue your career in information security? The only thing more exciting about interdepartmental business processes is breaking interdepartmental business processes and exploiting them.…

Read More