Author: HackWatchit

Bybit, the world’s second-largest cryptocurrency exchange, suffered a devastating $1.4 billion Ethereum (ETH) hack from a cold wallet breach on February 21, 2025. In the days following the attack, independent blockchain investigator ZachXBT traced the stolen funds directly to North Korea’s Lazarus Group, a notorious state-backed hacking organization. His findings were confirmed by Arkham Intelligence, a blockchain analysis firm, and shared with the Bybit team for further investigation. ZachXBT Uncovers Lazarus Group’s Crypto Trail On February 21 at 19:09 UTC, Arkham tweeted that ZachXBT had submitted definitive proof linking the attack to the Lazarus Group. His submission included detailed test…

The post Talkin’ About Infosec News – 1/24/2024 appeared first on Black Hills Information Security.

Raydium’s RAY token plummeted Sunday amid speculation that meme coin launchpad Pump.fun is preparing to launch its own automated market-making system.RAY has dropped 22% over the past 24 hours to $3.28 and is down a further 5% over the past hour, according to data from GeckoTerminal.Pump.fun has yet to respond to Decrypt’s request for comment. Raydium’s representatives have not publicly addressed the situation nor returned requests for comment.The sharp decline follows the discovery of an apparent test version of an AMM that could redirect significant trading volume away from Raydium’s platform.”Raydium has benefited significantly from Pump.fun, as graduated tokens have…

In the digital age, corporate networks face an ever-growing number of cybersecurity threats, making password management a critical component of an organization’s security strategy. Password managers serve as essential tools for improving security, streamlining access control, and reducing the risks associated with weak or compromised credentials. The Role of Password Managers in Corporate Security A password manager is a software application designed to store and manage passwords securely. It enables users to generate, store, and retrieve complex passwords without the need to remember them, reducing reliance on weak or reused credentials. In corporate environments, password managers contribute to security in…

A data broker (also known as an information product company) is an organization that makes money by collecting your personal information, analyzing it, and licensing it out to be used by other companies for things like marketing purposes.  Data providers gather data from many different sources to create a profile of who you are. This profile includes things like your interests, hobbies, demographics, and even the products you use.   Generally, data broker companies only deal with customers to collect information. A few of the top data brokerage companies are Epsilon, Acxiom, and Experian, but there are many data brokerages worldwide…

After four years at the United States Coast Guard Academy, Craig Bennett began his service as a USCG Officer in 1982, serving many active-duty, at-sea assignments as well as multiple active-duty shore assignments.   Now, more than 40 years later, he retires as Deputy Assistant Commandant for Resources and Deputy Chief Financial Officer (CFO), a role which he has served in since September 2013. A component of the Department of Homeland Security, the U.S. Coast Guard is comprised of a nearly 60,000-member active-duty, reserve and civil servant workforce with an annual budget of $13 billion.   Sharing the vacancy announcement for his…

Google Cloud has introduced quantum-safe digital signatures to its Cloud Key Management Service (Cloud KMS), making them available in preview. The tech giant says this initiative aligns with the National Institute of Standards and Technology’s (NIST) post-quantum cryptography (PQC) standards, addressing future risks of quantum computing breaking classic encryption schemes. With Google Cloud being used by financial institutions, large enterprises, government agencies, critical infrastructure units, and software developers, the introduction of quantum-safe encryption is crucial for safeguarding sensitive data from advanced attacks. Quantum-ready Cloud KMS Cloud KMS is Google Cloud’s encryption key management tool used for securely generating, storing, and…

Misconfig Mapper is an open-source CLI tool built in Golang that discovers and enumerates instances of services used within your organization. It performs large-scale detection and misconfiguration assessments, leveraging customizable templates with detection and misconfiguration fingerprints to identify potential security risks in widely used third-party software and services. Misconfig Mapper features “Misconfig Mapper is a simple tool to help bug bounty hunters and security researchers map out common security misconfigurations in well-known software services and products like Atlassian, Jenkins, and GitLab, as well as popular frameworks like PHP Laravel. It’s a project led by Intigriti, a bug bounty platform backed…

Authored by Yashvi Shah and Aayush Tyagi Executive summary McAfee Labs recently observed an infection chain where fake CAPTCHA pages are being leveraged to distribute malware, specifically Lumma Stealer. We are observing a campaign targeting multiple countries. Below is a map showing the geolocation of devices accessing fake CAPTCHA URLs, highlighting the global distribution of the attack. Figure 1: Prevalence on the field We identified two infection vectors leading users to these fake CAPTCHA pages: one via cracked game download URLs, and the other through phishing emails. GitHub users have been targeted by phishing emails prompting them to address a…