Author: HackWatchit

Switzerland’s NCSC requires cyberattack reporting for critical infrastructure within 24 hours Pierluigi Paganini March 11, 2025 Switzerland’s NCSC mandates critical infrastructure organizations to report cyberattacks within 24 hours of discovery. Switzerland’s National Cybersecurity Centre (NCSC) now requires critical infrastructure organizations to report cyberattacks within 24 hours due to rising cybersecurity threats. The new policy related to security breach notification is introduced as a response to the increasing number of cyber incident. “In view of the increasing threat of cyber incidents, Switzerland is introducing a reporting obligation for cyberattacks on critical infrastructure. Operators of critical infrastructure will be required to report…

Apple has released emergency security updates to patch a zero-day bug the company describes as exploited in “extremely sophisticated” attacks. The vulnerability is tracked as CVE-2025-24201 and was found in the WebKit cross-platform web browser engine used by Apple’s Safari web browser and many other apps and web browsers on macOS, iOS, Linux, and Windows. “This is a supplementary fix for an attack that was blocked in iOS 17.2,” the iPhone maker said in security advisories issued on Tuesday. “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted…

European cryptocurrency regulators are reportedly examining the OKX exchange following a record heist. Last month, the trading platform Bybit was the victim of a $1.5 billion theft, believed to be the largest in industry history. The issue was discussed last week by regulators at a meeting of the European Securities and Markets Authority’s Digital Finance Standing Committee, Bloomberg News reported Tuesday (March 11), citing sources familiar with the matter. As that report noted, OKX is subject to the EU’s new Markets in Cryptoassets (MiCA) regulations. Sources say watchdogs are focusing on OKX’s Web3 service, which offers crypto traders access to…

Authorities in India today arrested the alleged co-founder of Garantex, a cryptocurrency exchange sanctioned by the U.S. government in 2022 for facilitating tens of billions of dollars in money laundering by transnational criminal and cybercriminal organizations. Sources close to the investigation told KrebsOnSecurity the Lithuanian national Aleksej Besciokov, 46, was apprehended while vacationing on the coast of India with his family. Aleksej Bešciokov, “proforg,” “iram”. Image: U.S. Secret Service. On March 7, the U.S. Department of Justice (DOJ) unsealed an indictment against Besciokov and the other alleged co-founder of Garantex, Aleksandr Mira Serda, 40, a Russian national living in the…

Senator Cynthia Lummis reintroduced legislation that would authorize the US government to acquire up to 1 million Bitcoin (BTC), formalizing President Donald Trump’s recent executive order establishing a federal Bitcoin reserve.The BITCOIN Act aims to integrate digital assets into US financial strategy, requiring the Treasury Department to manage the acquisition and secure storage of Bitcoin. Lummis positioned the bill as a forward-looking measure for economic stability and innovation.She said in a statement.“By codifying this effort into law, we can ensure that our nation leverages digital assets to strengthen our financial future while maintaining its global leadership.”The bill has five Republican…

Tax season isn’t just busy for taxpayers—it’s prime time for scammers, too. As you gather your W-2s, 1099s, and other tax documents, cybercriminals are gearing up to exploit the flood of personal and financial data in circulation. From phishing emails posing as the IRS to fake tax preparers looking to steal your refund, these scams can lead to identity theft, fraudulent tax returns, and serious financial headaches.  The good news? IRS scams follow predictable patterns, and with a little awareness, you can spot the warning signs before falling victim. Let’s break down the most common tax scams and how you…

Sean Verity // Have you ever been on a pentest and thought to yourself, “I wish I had a robot to do this testing for me right now cuz this is just too much work”? I know I have. That’s how I came to use the QA tool, Selenium IDE, to automate things like: Brute forcing complicated authentication protocols. See Amazon Cognito’s implementation of Secure Remote Password, for example. Password spraying services where tooling is not available and there’s not enough time and/or willpower to figure out how to configure a Burp Suite Intruder attack with complicated CSRF mitigations. Harvesting…

As AI technology advances, cybercriminals create more personalized and convincing scams. This includes mimicking voices, deepfake videos, and highly convincing phishing emails that are difficult to spot. Phishing, deepfakes, and voice cloning are among the most common AI-driven techniques used by cybercriminals. Phishing: Ivanti’s research shows that attackers use GenAI to craft believable content at scale and low cost, making phishing attacks more effective. They believe that this threat vector will become even more powerful as cybercriminals further personalize their phishing messages based on data found in the public domain. Deepfakes: Researchers predict that cybercriminals will increasingly use video and…

Organizations must protect their networks and have confidence that their first line of defense can stop sophisticated threats. By selecting a firewall integrated with current, global threat intelligence, organizations can quickly identify and block both advanced attacks and exploits of common vulnerabilities. Enter Cisco Secure Firewall 4225, which demonstrated exceptional performance in SE Labs’ rigorous Advanced Security Test, scoring 100% in protection accuracy. Quickly detect and stop attacks SE Labs attempted a full breach where testers simulated attacks orchestrated by notorious hacking groups like APT29 and Scattered Spider. These groups are known for their relentless and sophisticated attack strategies, often…