Author: HackWatchit

Recently, DeepSeek attracted global attention and triggered worldwide discussion with its advanced AI models. Meanwhile, it has become the target of hackers and suffered frequent attacks. However, with the continuous improvement of AI large model capabilities, frequent security incidents and increasing risks expose users to greater threats. This post will use the NSFOCUS Large Model Security Assessment System (hereinafter referred to as “NSFOCUS AI-Scan”) to discuss the potential security hazards and coping strategies of AI large models. NSFOCUS AI-Scan is committed to embedding security assurance into the whole process of AI application development. It comprehensively covers data security, content security,…

The Bank of New York Mellon (BNY Mellon) disclosed holdings of more than $13 million in Bitcoin exchange-traded funds (ETFs) at the end of the fourth quarter, marking another sign of traditional financial institutions increasing their exposure to digital assets.According to a newly filed disclosure with the SEC, BNY Mellon owns 115,108 shares of WisdomTree Bitcoin Fund (BTCW), valued at approximately $11.87 million, and 25,309 shares of BlackRock’s iShares Bitcoin Trust (IBIT), worth about $1.4 million.Wallstreet warming up to BitcoinBNY Mellon’s position in Bitcoin ETFs adds to a growing trend among major Wall Street banks cautiously entering the digital asset…

Infosec Insider Post Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.

After months of congressional wrangling that saw the elimination of Ervin’s proposed independent privacy oversight board, President Gerald Ford signed the Privacy Act into law on December 31, 1974. Ford, who had chaired the Domestic Council Committee on the Right of Privacy that Nixon created during his final months in office, highlighted “the vital need to provide adequate and uniform privacy safeguards for the vast amounts of personal information collected, recorded, and used in our complex society.”How Is This Relevant Today?DOGE’s critics—including Democratic lawmakers, federal employee unions, and government watchdog groups—argue that giving the office’s young, controversial, and seemingly largely…

New XCSSET macOS malware variant used in limited attacks Pierluigi Paganini February 18, 2025 Microsoft discovered a new variant of the Apple macOS malware XCSSET that was employed in limited attacks in the wild. Microsoft Threat Intelligence discovered a new variant of the macOS malware XCSSET in attacks in the wild. XCSSET is a sophisticated modular macOS malware that targets users by infecting Xcode projects, it has been active since at least 2022. Microsoft observed that the malware was employed in limited attacks. The latest variant of the XCSSET malware supports enhanced obfuscation methods, updated persistence mechanisms, and new infection strategies. “The…

The customer support teams were drowning with the overwhelming volume of customer inquiries at every company I’ve worked at. Have you had similar experiences? What if I told you that you could use AI to automatically identify, categorize, and even resolve the most common issues? By fine-tuning a transformer model like BERT, you can build an automated system that tags tickets by issue type and routes them to the right team. In this tutorial, I’ll show you how to fine-tune a transformer model for emotion classification in five steps: By the end, you’ll have a fine-tuned model that classifies emotions…

Recently, as part of our ANTISOC Continuous Penetration Testing (CPT) service, I had an opportunity to investigate how attackers can leverage Slack in cyber-attacks, similar to how we frequently use Microsoft Teams to identify users and perform attacks during red team exercises (something Slack clearly makes an effort to prevent). Targeting Slack is particularly interesting because, even if an organization does not have a Slack subscription, individual users within the organization may have Slack accounts linked to their work email address. They may also use the Slack app or web interface on their work devices. In fact, after running the…

In episode 38 of “The AI Fix”, our hosts discover a robot they actually like, Sam Altman teases GPT-5 and trolls Elon Musk, a robot dog grows arms, an AI compliments Graham, Mark worries about “gradual disempowerment”, an octopus pretends to be a glove, and a listener reveals an entirely new reason to worry about AI. Graham’s plan to make his fortune is scuppered by an AI with opinions on time travel, and Mark investigates an intriguing question about a six-fingered glove. All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham…

In today’s healthcare landscape, rising costs are all but guaranteed. From increased labor, supply and drug prices to the shift to value-based care models and growing technology investments, delivering healthcare has become increasingly expensive for both patients and providers. Many organizations move to the cloud as a way to operate more efficiently and cost-effectively, though hybrid and multicloud environments can add complexity to these transformations. Still, improving data access and leveraging AI are essential steps toward better patient outcomes. A platformized approach to cybersecurity can help organizations navigate these challenges while strengthening resilience, boosting efficiency and managing costs. The Hidden…