Author: HackWatchit
The Federal Deposit Insurance Corp. (FDIC) and the Federal Reserve Board fined Discover Financial Services and two subsidiaries, Discover Bank and DFS Services LLC, alleging that they misclassified consumer credit cards as commercial, thereby requiring merchants to pay higher interchange fees. The FDIC said Wednesday (April 16) that it ordered Discover Bank to pay $1.225 billion in restitution and a $150 million civil money penalty after finding that the bank misclassified consumer credit cards as commercial. This misclassification affected millions of consumer credit cards over 17 years and resulted in higher interchange fees for transactions processed on the Discover network, the FDIC said in a…
Did you know that when participating in a Zoom call, you can grant permission to other participants to control your computer remotely? While this feature may come in handy when dealing with trusted family, friends and colleagues, threat actors have started abusing it to install malware on targets’ computer. The Zoom remote control attack This specific tactic has been leveraged by an individual or group that The Security Alliance (SEAL) – a nonprofit dedicated to enhancing security within the cryptocurrency and decentralized finance sectors – has dubbed ELUSIVE COMET. “ELUSIVE COMET is known to operate Aureon Capital, which purports to…
The FBI warns that scammers impersonating FBI Internet Crime Complaint Center (IC3) employees offer to “help” fraud victims recover money lost to other scammers. Over the last two years, between December 2023 and February 2025, the FBI said it has received over 100 reports of fraudsters using this tactic. “Complainants report initial contact from the scammers can vary. Some individuals received an email or a phone call, while others were approached via social media or forums,” the law enforcement agency warned in a Friday public service announcement. “Almost all complainants indicated the scammers claimed to have recovered the victim’s lost funds…
MetaTrader is a key tool for traders, offering a comprehensive platform that supports various financial instruments. Understanding its capabilities is important for effective trading. This article takes a close look at MetaTrader’s interface, features, and advanced tools, giving traders a practical guide to get the most out of the platform. When delving into the world of trading, MetaTrader stands out as a preferred platform, exemplified by its two flagship versions: MetaTrader 4 (MT4) and MetaTrader 5 (MT5). Both platforms cater to traders’ needs but serve different segments of the trading community with their unique features and capabilities. MT4: The Trader’s…
Kent and Jordan are back to continue their journey to make the world a better place. This time around, they will be reviewing a series of tools commonly used on pentests to identify flaws in Active Directory and general network design and implementation. You’ve probably heard of most of them, like BloodHound, ADExplorer, mimikatz…, wait, Mimikatz as a Blue Team? Yeah, it might be a bit of a stretch, but they’ll get there. Even better, with an introduction to various adversarial simulation frameworks, you can start your own journey of constant improvement. Nmap, CrackMap, BingMaps, and Domain Password Spray. (Re:…
A guest essay by former SEC enforcement official John Reed Stark and Duke University lecturer Lee Reiners suggests that the Securities and Exchange Commission’s changing stance on digital assets could recreate conditions that preceded the 2008 financial crisis.According to the New York Times article, the pair warns that relaxed oversight of token markets and the simultaneous expansion of traditional banks into token services may establish opaque linkages across financial institutions that have not been subjected to regulatory stress testing.The essay identifies the SEC’s rollback of crypto-specific enforcement efforts as a central catalyst. Stark and Reiners argue that these changes dismantle the legal…
Former CISA director Chris Krebs, who has come under attack from President Trump for saying that the 2020 presidential election was secure, is stepping down from his position at SentinelOne, telling employees at the cybersecurity company that “this fight is mine.”“For those who know me, you know I don’t shy away from tough fights,” Krebs wrote in a memo to employees that he also posted on LinkedIn. “But I also know that this is one I need to take on fully, outside of SentinelOne. This will require my complete focus and energy. It’s a fight for democracy, for freedom of…
Language Model (LLM) is not necessarily the final step in productionizing your Generative AI application. An often forgotten, yet crucial part of the MLOPs lifecycle is properly load testing your LLM and ensuring it is ready to withstand your expected production traffic. Load testing at a high level is the practice of testing your application or in this case your model with the traffic it would be expecting in a production environment to ensure that it’s performant. In the past we’ve discussed load testing traditional ML models using open source Python tools such as Locust. Locust helps capture general performance…
U.S. CISA adds Apple products and Microsoft Windows NTLM flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 18, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products and Microsoft Windows NTLM flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple products and Microsoft Windows NTLM vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions of the flaws: CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability CVE-2025-24054 Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability This week Apple released out‑of‑band security updates to…