Author: HackWatchit

Ebryx launched LLMSec — a suite of specialized security services designed to protect Large Language Models (LLMs) and autonomous AI agents in production environments. The new risk landscape for AI builders From OpenAI-based copilots to autonomous agents built with LangChain or CrewAI, LLMs are revolutionizing development. But their complexity introduces unique vulnerabilities: Prompt injection & jailbreaking – Malicious prompts can hijack model behavior Data leakage – Sensitive information exposed through model outputs Agent misuse – AI agents making unauthorized or unintended decisions Model supply chain risks – Backdoored or compromised open-source models Compliance gaps – Challenges aligning with GDPR, HIPAA,…

Derek Banks // I recently heard something on the news that caught my attention.  I suppose that isn’t abnormal these days, but this in particular was the first time I had heard of anything like it.  The US Government was considering banning a popular application in use on mobile devices.  Not just on government devices, but for all Americans. That app was TikTok.  Now, I am old enough where I only kind of know what TikTok is, something about sharing video clips over social media or something, apparently my kids like it… something something, get off my lawn… The alleged…

How does this job offer sound? When you pay, you get paid. Sounds fishy, right? In fact, it’s one of the fastest-growing job scams out there right now.  Looking at job scams overall, a data from the U.S. Federal Trade Commission (FTC) shows that job scam reports have nearly tripled between 2020 and 2024. Further, reported losses grew more than five times—spiking to $501 million in 2024.   In all, job scams are more common and more costly than ever.  And leading those losses is a new breed of job scam, where victims indeed “pay to get paid.”  “Pay to get…

Scientists in the U.K. may have uncovered the strongest evidence yet of life beyond our solar system. The discovery, involving the distant exoplanet K2-18b, was announced Tuesday during a press conference at the University of Cambridge.The research, led by University of Cambridge professor Nikku Madhusudhan, found that NASA’s James Webb Space Telescope detected the chemical signatures of dimethyl sulfide (DMS) and dimethyl disulfide (DMDS) in K2-18b’s atmosphere. “This is a very important molecule, because here on Earth, DMS is produced uniquely by life—microorganisms in the ocean, like algae, phytoplankton,” Madhusudhan said in a video presentation. “Theoretical studies had predicted for the…

The future of the Common Vulnerabilities and Exposures (CVE) program hangs in the balance: MITRE, the not-for-profit US organization that runs it, could lose the US federal funding that helps them maintain it. But others have been waiting in the wings and are getting ready to pick up the vulnerability tracking mantle. “On Wednesday, April 16, 2025, the current contracting pathway for MITRE to develop, operate, and modernize CVE and several other related programs, such as CWE, will expire,” Yosry Barsoum, MITRE VP and director at MITRE’s Center for Securing the Homeland, shared in an (leaked) email sent on Tuesday…

As many of you may know, MITRE’s DHS contract to manage the CVE and CWE programs expired on April 16, 2025. While emergency funding has since been restored for a short time, the long-term future of these programs still remains uncertain. Understandably, this situation has raised concerns throughout the cybersecurity community about the stability and continuity of vulnerability tracking and management systems that many organizations have come to rely upon. Understanding the situation The potential expiration of MITRE’s contract could impact how vulnerabilities are identified, tracked, and communicated across the industry. The Common Vulnerabilities and Exposures (CVE) and Common Weakness…

In an eleventh-hour move, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) ensured that the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs did not lapse. The move will ensure that the MITRE Corporation will continue operating the CVE program for at least another 11 months after federal cybersecurity officials confirmed that they temporarily extended their contract with the organization to keep the platform running.  In a LinkedIn message posted Wednesday, the CISA wrote, “The CVE Program is invaluable to the cyber community and a priority of CISA. Last night, CISA executed the option period on the…

Cyware has added Compromised Credential Management to the Cyware Intel Packaged Solution, a pre-configured threat intelligence program-in-a-box that enables security teams to operationalize threat intelligence faster by eliminating complex integrations and configurations. Built on Cyware Intel Exchange and pre-bundled with Team Cymru premium threat feeds, the packaged solution provides instant, out-of-the-box capabilities, allowing security teams to skip months of setup and focus immediately on detecting and responding to advanced cyber threats. This launch adds Compromised Credential Management to provide visibility into exposed credentials and automated remediation capabilities, further strengthening an organization’s security posture. “With growing threat volumes and shifting attack…

CISA’s 11-Month extension ensures continuity of MITRE’s CVE Program Pierluigi Paganini April 16, 2025 MITRE’s U.S.-funded CVE program, a core cybersecurity tool for tracking vulnerabilities, faces funding expiry Wednesday, risking disruption to global security. U.S. government funding for MITRE ’s CVE program, a key global cybersecurity resource for cataloging vulnerabilities, is set to expire Wednesday, risking disruption. The 25-year-old program has assigned over 274,000 CVE IDs for public security vulnerabilities. The CVE program is supported by a network of CVE Numbering Authorities (CNAs), which include major technology companies, research organizations, and government agencies. These CNAs are authorized to assign CVE…