Author: HackWatchit
In this episode, Graham unravels Operation Endgame – the surprisingly stylish police crackdown that is seizing botnets, mocking malware authors with anime videos, and taunting cybercriminals via Telegram. Meanwhile, Carole exposes the AI-generated remote hiring threat. Could your next coworker be a North Korean hacker with a perfect LinkedIn? And BBC cyber correspondent Joe Tidy joins us to talk about “Ctrl-Alt-Chaos”, his new book diving into the murky world of teenage hackers, ransomware gangs, and the strange motivations that lie behind digital mayhem. Plus: competitive pond husbandry, dead slugs, Hitster the board game, and a shoutout to the AI startup…
A British national known online as “IntelBroker” has been charged by the U.S. for stealing and selling sensitive data from victims worldwide, causing an estimated $25 million in damages. The indictment, revealed today by the U.S. Attorney’s Office for the Southern District of New York, accuses Kai West, a 25-year-old British man, of using the handle “IntelBroker” in a years-long campaign to steal and sell data from government agencies and networks, companies, and critical infrastructure. As seen by BleepingComputer, this data was most often put up for sale on the BreachForums hacking forum. The stolen information included sensitive health records, internal…
During visits in recent months, Emelie says her husband, who was detained at Stewart until he was deported last month, described severe overcrowding. “He told me once Trump took over, they were rolling out mats in the halls. People were sleeping out there.”Emelie is a pseudonym granted for privacy. She says the conditions took a visible toll on her husband, who lost weight, grew increasingly anxious, and struggled to sleep amid the noise and tension. He described having to wait long stretches between meals. When her husband came down with the flu and spiked a high fever, she says, he…
Newark, United States, June 23rd, 2025, CyberNewsWire The OpenSSL Corporation and the OpenSSL Foundation are issuing a final call for speaker proposals for the inaugural OpenSSL Conference 2025, taking place October 7–9, 2025, at the Vienna House by Wyndham Diplomat Prague. With just 7 days remaining until the submission deadline of June 30, 2025, the organisers invite global contributors from academia, industry, and the open-source community to submit their proposals and help shape the agenda of this landmark event. A Global Stage for Cryptography Innovation The OpenSSL Conference 2025 will bring together a global community of cryptography experts, developers, legal…
A high-severity vulnerability (CVE-2025-49144) in the Notepad++ installer could be exploited by unprivileged users to gain SYSTEM-level privileges through insecure executable search paths. There is currently no indication that the vulnerability is being leveraged by attackers, though technical details and a proof-of-concept (PoC) have been published – and redacted shortly after for security reasons. About CVE-2025-49144 Notepad++ is a popular free and open-source text and source code editor for Windows. CVE-2025-49144 is a local privilege escalation flaw that affects Notepad++ versions up until and including v8.8.1, and may allow attackers to surreptitiously run malicious executables on target systems. “An attacker…
In brief The FHFA has instructed Fannie Mae and Freddie Mac to begin preparing to accept cryptocurrency as mortgage assets. Director William Pulte framed the move as aligning with a broader vision of the Trump Administration. The order sparked mixed reactions, with praise for innovation and criticism over restrictions on self-custody. The U.S. housing market is bracing for a potential shakeup by the crypto industry.On Wednesday, the Federal Housing Finance Agency ordered Fannie Mae and Freddie Mac to begin preparing to accept crypto as a form of mortgage-related payment.The directive, announced on X by FHFA Director William Pulte, marks the…
Disrupting the operations of cryptocurrency mining botnets Pierluigi Paganini June 25, 2025 Cybersecurity researchers devised two attack techniques to disrupt the operations of cryptocurrency mining botnets. Akamai Researchers uncovered two novel techniques to disrupt cryptocurrency mining botnets by exploiting flaws in common mining topologies. Current methods to stop cryptocurrecy mining botnets are pool bans or infrastructure takedowns, however, both are slow and complex. Researchers developed two faster techniques exploiting vulnerabilities in the stratum protocol to disrupt operations by targeting proxies or wallets, potentially forcing attackers to abandon campaigns. “We developed two techniques by leveraging the mining topologies and pool policies that enable us to…
A few years ago I wrote a short article about the Titanic, and the lessons for cyber risk management. However, there’s arguably a far more interesting part to that story. When the RMS Titanic hit an iceberg on 15 April 1912, she set off flares and her wireless operator sent out a distress call. The RMS Carpathia responded, but by the time she arrived, the Titanic had already sunk: only those who had made it to the lifeboats could be saved. Some 1,500 people died. Another ship was closer and could potentially have responded faster—perhaps even fast enough that more…
Lawrence Hoffman // It’s been one of those crazy busy weeks. I always feel like I didn’t get enough time to read articles, surf Reddit, and attempt to keep up […] The post Lawrence’s List 061016 appeared first on Black Hills Information Security, Inc..