Author: HackWatchit

 Universal Approximation Theorem states that a neural network with a single hidden layer and a nonlinear activation function can approximate any continuous function.  Practical issues aside, such that the number of neurons in this hidden layer would grow enormously large, we do not need other network architectures. A simple feed-forward neural network could do the trick. It is challenging to estimate how many network architectures have been developed.  When you open the popular AI model platform Hugging Face today, you will find more than one million pretrained models. Depending on the task, you will use different architectures, for example transformers for natural language…

A recent report from Zimperium zLabs has revealed a disturbing trend in the mobile technology landscape: nearly 50% of mobile devices worldwide are running on outdated or obsolete operating systems. This poses a serious security risk, as these devices are left vulnerable to the ever-evolving array of cyber threats in today’s digital landscape. The situation is particularly concerning given the widespread use of certain operating systems. Of those outdated devices, over half are running on Android, the mobile operating system developed and owned by Google. The remaining 40% of devices are powered by iOS, Apple’s mobile operating system. Both Android…

Seven malicious PyPi packages were found using Gmail’s SMTP servers and WebSockets for data exfiltration and remote command execution. The packages were discovered by Socket’s threat research team, who reported their findings to the PyPI, resulting in the removal of the packages. However, some of these packages were on PyPI for over four years, and based on third-party download counters, one was downloaded over 18,000 times. Here’s the complete list shared by Socket: Coffin-Codes-Pro (9,000 downloads) Coffin-Codes-NET2 (6,200 downloads) Coffin-Codes-NET (6,100 downloads) Coffin-Codes-2022 (18,100 downloads) Coffin2022 (6,500 downloads) Coffin-Grave (6,500 downloads) cfc-bsb (2,900 downloads) The ‘Coffin’ packages appear to be…

Let’s get real about your internship resume — creating one that gets your foot in the door isn’t easy, especially if you have close to zero experience. The good thing is, there are simple strategies you can use to maximize your chances. Firstly, never blast out one generic resume to every company on your list. Every single resume you send should scream, “I’m the perfect fit for this internship.” Secondly, even if you’re low on work experience, find a way for your resume to highlight your strengths and key skills (we’ll cover that, and more, in depth). Spend the next…

Shila, can you tell us a bit about yourself? I’m an HR Partner for EMEA. I’m 33-years-old, a proud mom to Naomi and married to Yonatan, and we live in a small kibbutz in the north of Israel. I hold a BA in Social Work and an MA in Organizational Development, and I always say I’m incredibly lucky to combine my passion for people with my professional skills. What led to your decision to join Check Point? The decision to join Check Point was driven by my desire to be part of such a successful and leading Israeli company. Along the…

Two SonicWall SMA100 flaws actively exploited in the wild Pierluigi Paganini May 01, 2025 SonicWall confirmed that threat actors actively exploited two vulnerabilities impacting its SMA100 Secure Mobile Access (SMA) appliances. SonicWall revealed that attackers actively exploited two security vulnerabilities, tracked as CVE-2023-44221 and CVE-2024-38475, in its SMA100 Secure Mobile Access appliances. Below are the descriptions of the two flaws: CVE-2023-44221 (CVSS score: 7.2) – Improper neutralization of special elements in the SMA100 SSL-VPN management interface. A remote authenticated attacker with administrative privilege can exploit the flaw to inject arbitrary commands as a ‘nobody’ user, potentially leading to OS Command Injection Vulnerability.…

Beau Bullock // TL;DR Check-LocalAdminHash is a new PowerShell script that can check a password hash against multiple hosts to determine if it’s a valid administrative credential. It also has the ability to exfiltrate all PowerShell PSReadline console history files from every profile on every system that the credential provided is an administrator of. Get Check-LocalAdminHash here: https://github.com/dafthack/Check-LocalAdminHash History Buff On a recent assessment, I wanted to gather all the PowerShell console history files (PSReadline) from every system on the network. The PSReadline console history is essentially the PowerShell version of bash history. Since PowerShell version 5 everything you type…

The French foreign ministry has attributed a series of cyberattacks on national interests to APT28, a group linked to Russia’s military intelligence agency (GRU), and has strongly condemned its use by the Russian state. Since 2021, this attack group has been used to target or compromise a dozen French entities.  “APT28 is also being used to exert continual pressure on Ukrainian infrastructures amid Russia’s war of aggression against Ukraine, particularly when it is operated out of GRU Unit 20728,” the Ministry said in its Tuesday statement. “Many European partners have also been targeted by APT28 in recent years. In this…

RSAC 2025 Conference is taking place at the Moscone Center in San Francisco. Help Net Security is on-site, and this gallery takes you inside the event. The first gallery is here. The featured vendors are: Tines, Thales, Sumo Logic, N-able, Google, ExtraHop, Cy4Data Labs, Swissbit, and Akamai.