Author: HackWatchit
Have you ever tried packaging a Python library/app in order to upload it to the Python Package repository (Pypi)? Not so straight forward is it? There’s a gazillion files you need (setup.py, Manifiest.ini, etc..) which all do different things. On top of that, there’s a decent amount of overhead to configure the necessary settings in order to expose any command line interface (CLI) tools your packaging. Additionally, you also need to manage dependencies, keep them in sync with your requirements.txt files and install third-party applications in order to upload them to Pypi. That’s after you even manage to setup a…
Email has become both a lifeline for communication and a prime target for cybercriminals. For small and medium-sized businesses, it is the lifeline between the business and its customers and partners. Recent findings by Forfend, an email security software provider, indicate that approximately 1 in 5 emails sent in 2024 contained potential phishing threats. This alarming statistic highlights a growing need for robust email security measures, as AI-driven phishing scams are on the rise. The cybersecurity landscape is evolving rapidly. According to cybersecurity experts, email remains the gateway for more than 90% of cyberattacks. Phishing emails—fraudulent messages designed to trick recipients…
OpenAI is working on yet another AI model reportedly called GPT-4.1, a successor to GPT-4o, which is expected to come before GPT 5.0 The Verge recently reported that OpenAI plans to launch GPT-4.1, which is an upgrade to the existing GPT-4o. And now, we have more reasons to believe the model is indeed coming. As spotted by AI researcher Tibor Blaho, OpenAI is already testing model art for o3, o4-mini, and GPT-4.1 (including nano and mini variants) on the OpenAI API platform. GPT 4.1 references on OpenAI’s website This confirms that GPT-4.1 does exist, but it doesn’t appear to be a successor to…
Seven Schools Have Confirmed Event Dates for April and May BCR Cyber, a leading provider of comprehensive cybersecurity training and job placement services, and the Maryland Association of Community Colleges (MACC), the advocate and unified voice for Maryland’s 16 community colleges, announced today that Maryland community colleges will be hosting ribbon cutting events throughout the year to mark the launch of their participation in the Maryland Cyber Workforce Accelerator (CWA) program. Dates confirmed for April and May are as follows: Additional event dates will be announced in the coming weeks. Developed by MACC and BCR Cyber, the CWA provides all…
2024 brought about countless new cybersecurity challenges including significant growth of the mobile threat landscape, according to Lookout. Threat actors, ranging from nation-states to individuals, are increasingly targeting mobile devices for the onset of their attacks to steal credentials and infiltrate the enterprise cloud in a pathway known as the modern kill chain. More than ever, organizations of every size across every industry must view mobile targeting as a canary in the coal mine – an early indication that they could be under attack elsewhere in their infrastructure. iOS phishing attacks on the rise Thanks to Apple’s walled garden approach,…
The Israeli spyware maker NSO Group has been on the US Department of Commerce “blacklist” since 2021 over its business of selling targeted hacking tools. But a WIRED investigation has found that the company now appears to be working to stage a comeback in Trump’s America, hiring a lobbying firm with the ties to the administration to make its case.As the White House continues its massive gutting of the United States federal government, remote and hybrid workers have been forced back to the office in a poorly coordinated effort that has left critical employees without necessary resources—even reliable Wi-Fi. And…
Online accounts are integral to cloud computing, encompassing private, public, and hybrid services that store vast amounts of data across servers and datacenters. These accounts include: Email platforms Social media accounts Knowledge bases Professional web-based tools Like any digital asset, online accounts are vulnerable to cyber-attacks. The consequences of sabotage, espionage, or diversion could be catastrophic, potentially destabilizing networks that serve millions of users. The Risks of Online Account Vulnerability Online accounts are critical assets that impact both personal lives and businesses. A cyber-attack targeting cloud infrastructure can have severe consequences: Service Disruptions: Attacks on cloud storage can temporarily render services…
Members of the U.S. House Homeland Security and Oversight Committees have reached out to Russell Vought, director of the Office of Management and Budget (OMB), urging the agency to streamline duplicative and resource-heavy cybersecurity regulations. They argued that these burdensome requirements divert critical infrastructure owners and operators from actively defending their networks. Mark E. Green, a Republican representative from Tennessee and the chairman of the U.S. House Committee on Homeland Security; James Comer, a Kentucky Republican and chairman of the Committee on Oversight and Government Reform; Clay Higgins, a Los Angeles Republican and chairman of the Subcommittee on Federal Law…
Are you responsible for the security of webapps? Are you curious about how penetration testers are able to find vulnerabilities in them? Burp Suite is the preferred tool for many webapp pentesters and bug bounty hunters. It’s easy to get started in Burp, but not all of its features are easy to find or simple to configure. If you’ve ever watched someone else use Burp, you’ve no doubt picked up something useful from them: everyone seems to have their own tricks for getting more out of it. In this live one-hour Black Hills Information Security (BHIS) webcast, BB King will…