Author: HackWatchit
ChatGPT Plus subscription is now free, but only if you’re a student based out of the United States of America and Canada. ChatGPT Plus is a premium subscription that costs $20 a month and allows you to access the paid models, including GPT o1, which is the company’s best reasoning model. Additionally, it gives you access to o3-mini and o3-high reasoning models, which are absent from the free tier. ChatGPT Plus Source: BleepingComputer OpenAI is making these features free for college students just in time for final exams. However, according to an FAQ document, students will be able to access the Premium…
The European Commission has released ProtectEU, a comprehensive European Internal Security Strategy designed to assist Member States and enhance the EU’s capacity to ensure the safety of its citizens. The strategy outlines a vision and work plan for the future, featuring a more robust legal framework, enhanced information sharing, and strengthened cooperation. It also enhances resilience against hybrid threats by protecting critical infrastructure, reinforcing cybersecurity, and combatting online threats. The Strategy aims to foster a change of culture on internal security, with a whole of society approach involving citizens, businesses, researchers, and civil society. Security aspects will be mainstreamed in…
WinRAR users, upgrade your software as soon as possible: a vulnerability (CVE-2025-31334) that could allow attackers to bypass Windows’ Mark of the Web (MotW) security warning and execute arbitrary code on your machine has been fixed in version 7.11. About CVE-2025-31334 WinRAR is an extremely popular file archiver utility for Windows. It can create and view archives in RAR or ZIP file formats, as well as “unpack” archive file in other formats (ISO, JAR, TAR, 7zm CAB, etc.) and EXE (executable) files containing those archive formats. CVE-2025-31334 is an issue in how WinRAR handles symbolic links (symlinks), which are essentially…
In recent years, the rise of AI-generated art and animation has sparked a revolution in how creative content is produced. Among the most notable examples is the trend of creating artworks inspired by Studio Ghibli’s iconic animation style. With its distinct aesthetic, emotional storytelling, and enchanting visuals, Ghibli’s art has inspired a global audience and is now being replicated by AI tools that can generate similar animations. However, this new wave of technology has raised important cybersecurity concerns that need to be addressed as the line between human creativity and artificial intelligence blurs. The Rise of AI-Generated Art AI-driven art…
Originally Aired on April 12, 2021 Articles discussed in this episode: The post Talkin’ About Infosec News – 4/12/2021 appeared first on Black Hills Information Security, Inc..
Meme coins plunged over the last 24 hours, hit by the one-two punch of a global market selloff and tariff-induced panic that has rattled both crypto and equities.Dogecoin (DOGE), Shiba Inu (SHIB), and other popular tokens have posted double-digit losses, as traders rush to exit riskier assets amid macroeconomic fears.The crypto carnage came after a weekend of chaos prompted by U.S. President Donald Trump’s announcement of sweeping new tariffs on 185 countries, triggering fears of a global slowdown and compounding already fragile investor sentiment.In the past 24 hours, DOGE has fallen 16.6% to $0.1377, while SHIB has shed 11.3%, trading…
AI isn’t waiting for security teams to catch up. It’s running full steam ahead, without any regard for what may stand in its way. The recent security debacle surrounding DeepSeek — where Wiz researchers uncovered extensive vulnerabilities, including exposed databases, weak encryption and susceptibility to AI-model jailbreaking — serves as a stark warning for organizations rushing to adopt AI technologies without proper security controls. The vulnerabilities discovered in DeepSeek reveal a pattern in how organizations approach AI security. When Wiz Research uncovered a publicly accessible ClickHouse database containing sensitive chat histories and API secrets, it exposed more than just DeepSeek’s technical oversights…
EDR-as-a-Service makes the headlines in the cybercrime landscape Pierluigi Paganini April 07, 2025 Cybercriminals exploit compromised accounts for EDR-as-a-Service (Emergency Data Requests – EDR), targeting major platforms According to a detailed analysis conducted by Meridian Group, an increasingly complex and structured phenomenon, commonly referred to as “EDR-as-a-Service,” is taking hold in the cybersecurity landscape. In a nutshell, some criminal groups are exploiting compromised accounts belonging to law enforcement and other government agencies to illicitly forward Emergency Data Requests (EDRs) to major online platforms. These falsely obtained credentials enable cyber criminals to successfully mimic a real-world investigation by inducing platform operators…
NAVY Lockheed Martin Corp., Lockheed Martin Aeronautics Co., Fort Worth, Texas, is awarded a not-to-exceed $238,000,000 undefinitized modification (P00001) to a previously awarded fixed-price incentive (firm-target) contract (N0001925C0070). This modification adds scope to procure long lead materials, parts, components, and associated support in support of the F-35 Lot 20 production aircraft for non-U.S. Department of Defense (DOD) partners and Foreign Military Sales (FMS) customers. Work will be performed Fort Worth, Texas (59%); El Segundo, California (14%); Warton, United Kingdom (9%); Cameri, Italy (4%); Orlando, Florida (4%); Nashua, New Hampshire (3%); Baltimore, Maryland (3%); San Diego, California (2%); and other various…