Author: HackWatchit

India’s Central Bureau of Investigation (CBI) has conducted raids at 60 locations across the country, including in cities such as Delhi NCR, Pune, Chandigarh, Nanded, Kolhapur, and Bengaluru, as part of its investigation into the $800 million (₹6,600 crore) GainBitcoin scam.Launched in 2015 by Amit Bhardwaj (who passed away in 2022) and his brother Ajay Bhardwaj, GainBitcoin, which operated under Variabletech Pte. Ltd., promised investors lucrative returns of 10% monthly in Bitcoin (BTC) through “cloud mining contracts.”“CBI took over these cases and conducted an omnibus and comprehensive investigation to uncover the full extent of the fraud, identify all accused parties,…

Microsoft has released the February 2025 preview cumulative update for Windows 11 24H2, with 33 improvements and fixes for multiple issues, including SSH and File Explorer bugs and the volume jumping to 100% when waking the PC from sleep. KB5052093 is part of Microsoft’s monthly “optional non-security preview updates” schedule that lets Windows admins test new features, bug fixes, and improvements that will be rolled out to all customers with the March 2025 Patch Tuesday release. First, the Windows 11 February 2025 preview update (like the one released for Windows 10 systems) resolves a longstanding issue that breaks SSH connections on some PCs after installing…

Pentera has unveiled Cyber Pulse, a new mechanism to update the Pentera platform with the latest vulnerabilities and attack techniques from the Pentera research team. Cyber Pulse delivers a continuous stream of new cyber exposure validation capabilities, enabling organizations to identify and mitigate new threats and vulnerabilities before they can be exploited. The MITRE ATT&CK catalog grew by over 30 new tactics, techniques, and procedures (TTPs) in the past year alone, while CISA’s Known Exploited Vulnerabilities (KEV) catalog grew by over 180 CVEs over the same period. With cyber threats evolving at an unprecedented pace, enterprise IT security teams are…

New LightSpy spyware variant comes with enhanced data collection features targeting social media platforms Pierluigi Paganini February 26, 2025 Researchers found an updated LightSpy spyware with enhanced data collection features targeting social media platforms like Facebook and Instagram. Cybersecurity researchers at Hunt.io have found an updated version of the LightSpy spyware that supports an expanded set of data collection features to target social media platforms like Facebook and Instagram. ThreatFabric researchers first discovered a macOS version of LightSpy spyware in May 2024, the threat has been active in the wild since at least January 2024. ThreatFabric observed threat actors using two publicly…

Across the financial services landscape, digital transformation has changed everything. This fundamental and technological shift has led to an ongoing recalibration of the relationships small to medium-sized businesses (SMBs) have with financial institutions (FIs). It’s a recalibration that could favor community banks and credit unions (CUs) over national banking giants. “SMBs don’t just want a bank — they want a partner,” David Durovy, SVP of transformation at i2c, told PYMNTS. “And community banks and credit unions are uniquely positioned to be that partner.” The shift toward community banks is driven by practical concerns. Despite the dominance of national banks, high fees…

The post Talkin’ About Infosec News – 11/30/2023 appeared first on Black Hills Information Security.

Under the dazzling lights of Las Vegas, Check Point unveiled its forward-thinking strategy for safeguarding our interconnected world at CPX 2025, its flagship annual cyber security conference. The event drew thousands of participants from the United States, Canada, and Latin America. As the last of three global regional conferences, CPX Americas showcases the rising cyber threats in LATAM, where attacks have surged at an unprecedented pace. Organizations in this region are now facing an average of 2,569 attacks per week, nearly 40% higher than the global average of 1,848 attacks per organization. As cyber criminals adopt more advanced methods, Latin…

CrowdStrike and Intel Corp. were key research sponsors and participants in the latest project from the MITRE Center for Threat-Informed DefenseThe PC Security Stack Mappings — Hardware-Enabled Defense initiative mapped Intel vPro® Security features, including Intel®Threat Detection Technology (Intel® TDT), to MITRE ATT&CK® adversarial behaviorsWith the CrowdStrike Falcon® platform’s Accelerated Memory Scanning leveraging Intel TDT, 93 ATT&CK TTPs were mapped at the hardware level for earlier detection with minimal impact on system performance The AI-native CrowdStrike Falcon platform is built to detect and protect against even the most advanced attacks. And as new research shows, it can further strengthen defenses…

You didn’t get the job. Worse yet, you got scammed. Because the opening was never real in the first place. It was a job scam, through and through. We’ve covered job scams for some time here in our blogs. And as it is with many other sorts of scams, AI tools have made it easier for scammers to pull them off. It looks something like this: Thousands of phony job listings are written by AI chatbots. Bogus social media profiles, many also created with AI, posing as recruiters. Scam texts and emails featuring non-existent job offers. And all kinds of…