Explore Bitcoin’s 2025 prospects, market trends, mining, and secure methods like cloud platforms. Learn strategies to manage risks…

Explore Bitcoin’s 2025 prospects, market trends, mining, and secure methods like cloud platforms. Learn strategies to manage risks in the changing cryptocurrency market.

The year 2024 has been a record-breaking one for the cryptocurrency market in many aspects. Bitcoin and other cryptocurrencies reached historical highs, and cryptocurrencies themselves became a vital part of the global financial system. Many experts believe that 2025 could be a year of new records for Bitcoin, as well as the end of the current market cycle.

Bitcoin started 2024 at $45,000 and continued to rise. From November 5th, following Donald Trump’s victory in the U.S. presidential election, its price increased without significant pullbacks, starting at $68,000 and breaking records. Soon, Bitcoin’s price surpassed the $100,000 mark for the first time.

Some experts see no reason for growth to stop. Analysts at Bernstein have identified key factors that, in their opinion, could push Bitcoin to a target level of $200,000 in 2025, as reported by _The Block_. These growth factors include new appointments in Trump’s administration, specifically candidates for the positions of SEC head and Secretary of the Treasury. Among the most likely candidates for Treasury Secretary is Howard Lutnick, CEO of Cantor Fitzgerald, while his competitors include hedge fund manager Scott Bessent and former Federal Reserve Board member Kevin Warsh.

However, skeptics are also present. In the early days of 2025, on January 7th, Bitcoin’s value dropped below $100,000. Furthermore, the future movement of Bitcoin’s price will depend on political events and possible regulatory changes following Trump’s victory, among other factors. It is impossible to say with certainty that Bitcoin will continue to rise, as the market has entered a correction phase amid expectations of rate cuts in 2025.

Bitcoin remains a highly volatile asset, and its price can fluctuate both upward and downward. However, there are several alternative ways to earn with Bitcoin aside from the traditional buy-and-hold (HODL) strategy:

****Staking and DeFi Protocols****

Although Bitcoin does not directly support staking, you can earn interest by lending your BTC through DeFi platforms or centralized services (e.g., BlockFi, Nexo, Celsius).

****Classic Mining****

Classic mining is the process of cryptocurrency extraction, where you set up and manage equipment (e.g., ASIC miners). The equipment connects to the Bitcoin network to verify transactions, and in return, you earn rewards in the form of new Bitcoins and transaction fees.

**Advantages:**

*   Full control over the equipment.
*   You choose the cryptocurrency to mine.
*   No intermediaries, so all earnings stay with you.

**Disadvantages:**

*   Ongoing electricity, cooling, and maintenance costs.
*   High equipment costs (ASIC miners can range from $2,000 to $10,000).
*   Need to be in a country with low electricity tariffs, otherwise, profitability may be minimal.

Classic mining is most profitable in countries with low electricity rates, such as Iceland, Kazakhstan, Venezuela, Russia, and Iran.

**Working with Companies**

**Genesis Mining** is one of the largest and most well-known cloud mining platforms. Founded in 2013 in Germany, the company operates farms in countries with low electricity costs, such as Iceland and Sweden. Genesis Mining offers rental computing power for mining various cryptocurrencies, including Bitcoin, Ethereum, Litecoin, and others.

**Thunderbolt Union** is a UK-based company operating under a business model similar to Uber. It connects people from countries with expensive electricity with people from countries with cheap electricity. Thunderbolt Union handles all organizational processes, including purchasing equipment at low prices, installing and setting it up at hosters residing in regions with low electricity tariffs, and servicing the equipment. All devices are insured.

**ECOS** is a cloud mining service established in 2017 in Armenia. ECOS allows users to rent mining power for cryptocurrency mining without having to buy and maintain their own equipment. The platform offers various contracts for mining Bitcoin, Ethereum, and other popular cryptocurrencies such as Litecoin and Dash.

****Cloud Mining****

Cloud mining allows you to rent computational power from specialized companies. Instead of buying and setting up equipment, you rent power to use a specific amount of hash rate.

**How it works:**

1.  You choose a company and register.
2.  You purchase computing power, which gives you the right to use computational resources for cryptocurrency mining.
3.  The company performs the mining, and you receive your share of the profits proportional to the rented power.

**Advantages:**

*   No need to buy, install, or maintain equipment.
*   Suitable for beginners without technical knowledge.

**Disadvantages:**

*   Lack of transparency in the operation of some services.
*   Many unscrupulous companies, increase the risk of fraud.

****Conclusion****

In 2025, Bitcoin will continue to be one of the most discussed assets on the global financial market. While its price remains highly volatile and may fluctuate both upward and in correction, there are several ways to earn from cryptocurrency while avoiding significant risks. These include classic mining, working with cloud platforms, and partnering with those that offer risk-free business models. However, as with any investment process, it is important to carefully select strategies and partners to minimize potential risks and ensure stable profits.

_**Editor’s Note:** The information presented in this article is for informational purposes only and should not be considered financial advice. Cryptocurrency investments and related activities involve significant risk, and readers should conduct their own research or consult a licensed financial advisor before making any decisions. Hackread.com does not endorse or recommend any specific investment strategies or platforms mentioned in this article._

Bitcoin’s Prospects in 2025: Exploring Opportunities and Mitigate Risks

Explore how AI tools like OpenAI’s Sora face restrictions in Europe due to GDPR, with insights on bypassing…

Explore how AI tools like OpenAI’s Sora face restrictions in Europe due to GDPR, with insights on bypassing geo-restrictions and the impact on innovation and users.

Artificial intelligence tools are being widely integrated with many tools and activities as people begin noticing their benefits. The majority of companies around the world are using AI actively or exploring its use in some form. This means many startups and big corporations are actively testing new forms of AI and applying them to make life easier for everyone often except for Europe (in this article, don’t associate the word with continental Europe, as we discuss the circumstances within the European Union).

Many popular AI tools like OpenAI’s Sora and Meta AI are not available to European users. The main reasons behind their unavailability are due to regulatory frameworks and operational constraints. But does this mean European users are completely left out of using AI tools? Not really.

In this blog, we are going to look at why many new AI tools aren’t available in Europe and some tips to access them. 

****Bypassing The Geo-Restrictions****

AI tools are not available in Europe and the only way to access them is by using a strong proxy or third-party service. It can be quite surprising for people outside Europe to be denied access to popular AI tools since they are available elsewhere. For example, people from around the world, including Europe can use US-based proxies to get access to these platforms and enjoy using AI without any difficulties.

The proxy will act as a middleman between your device and the website and make it look like you are using the AI from the US itself. This not only improves accessibility but also has additional benefits of enhanced connection and improved security. This means businesses or even individuals who travel frequently and still require uninterrupted access to popular AI tools like Sora can use the help of proxies.

****Why Are AI Tools Restricted In Europe?****

Most AI tools are restricted in Europe due to the regulations the continent has, mainly in the form of the General Data Protection Regulation (GDPR). The GDPR ensures that all citizens and users within Europe are protected from unnecessary data tampering and misuse, but it also puts a heavy burden on tech companies. Since an AI platform requires data to be used for machine learning, the GDPR prevents tech companies from processing data in the traditional way which can harm the user’s privacy. This results in a delay in deploying the AI and hence the unavailability.

Take OpenAI’s Sora as an example. It has recently come into the news regarding its unavailability in Europe, and that is mainly due to compliance issues. Sora is a platform that uses advanced immersive AI to create hyper-realistic videos with simple prompts. This can create a revolution in terms of education and digital marketing. However, concerns regarding how the user data is collected, processed, and stored have delayed its deployment.

****What Europe Is Missing Out On****

With these restrictions, Europe is missing out on several advanced AI tools that are popular elsewhere. OpenAI’s Sora comes to mind first since it’s a relatively new AI that is available in most countries as of now and offers some hyper-realistic visuals with real-time prompts. Meta AI is also popular as it offers an entire suite for developers and consumers alike to enhance their social media experience and recommendations.

Some AI models are still available in Europe, like Jasper AI. The platform works similarly to ChatGPT but has more of a creative edge making it perfect for creative tasks like writing or brainstorming. JasperAI was initially unavailable due to GDPR laws, but after three years of continuous negotiations, the platform is now approved under the AI Act. This goes to show that Europe still has the potential to allow AI systems to run for European marketers.

****How AI Restrictions Affect Innovation****

Europe is pretty rigorous about its data regulation laws and user privacy; it’s a good thing to protect users but it also has its negative sides with companies unable to operate as they could. These restrictions can result in technological gaps between regions where businesses in the US can gain a competitive edge to streamline operations and enhance productivity. This not only results in a global challenge but also forces companies within Europe to look at less-productive alternatives.

The unavailability of AI tools in Europe is a pressing issue that is still being negotiated between lawmakers and developers. Even though AI has its share of downsides regarding data use, Europe needs to find a solution that aligns it with the globe in terms of AI. Since many things in our digitized world are connected, the unavailability of the latest technologies in the EU member countries may have an impact on digital nomads too, who choose to work from Europe.

As the EU also has initiatives to attract nomads, it will likely loosen some restrictions in the future, particularly those applicable in the early stages of new technology releases, while keeping user privacy at the forefront.

Top/Featured Image via FreePik

Why Many New AI Tools Aren’t Available In Europe – And How To Access Them

Silverfort has discovered that a misconfiguration can bypass an Active Directory Group Policy designed to disable NTLMv1, allowing…

Silverfort has discovered that a misconfiguration can bypass an Active Directory Group Policy designed to disable NTLMv1, allowing NTLMv1 authentications to persist. Microsoft announced the full decommission of NTLMv1 from Windows 2025.

Unified Identity Security company Silverfort has discovered a security vulnerability involving a misconfiguration in Active Directory. This vulnerability allows NTLMv1 authentication to persist despite attempts to disable it through Group Policy.

NTLMv1 is an outdated authentication protocol with known security weaknesses, making it a prime target for attackers. The flaw, discovered by senior security researcher Dor Segal, exposed that even teams implementing this policy remain exposed to NTLMv1 authentications.

The vulnerability arises from a flaw in the implementation of the Group Policy. While the policy aims to block NTLMv1, certain on-premises applications can bypass this restriction by specifically requesting NTLMv1 authentication. This bypass creates a false sense of security for organizations that believe they have effectively disabled NTLMv1. Attackers can exploit this vulnerability to intercept NTLMv1 traffic, crack user credentials, and gain unauthorized system access.

Attackers can exploit NTLMv1’s weaknesses to move laterally or escalate privileges, exposing organizations to significant risk.

 “It is important to note that Windows clients with LMCompatibilityLevel 3 and above will not generate NTLMv1 if requested. However, non-Windows clients are not protected. If an application requests an NTLMv1 message from a non-Windows client, the Domain Controller may approve the authentication and generate a session key,” researchers noted in a blog post.

Silverfort’s research highlights the security weaknesses of NTLMv1, such as its susceptibility to relay attacks and the limitations of the Group Policy mechanism in completely preventing its use. By understanding the technical intricacies of NTLMv1 and the limitations of existing mitigation strategies, organizations can better assess their risk exposure and implement effective security measures.

Although Microsoft has acknowledged the issue and announced plans to completely remove NTLMv1 support in future versions of Windows, organizations still need to take proactive measures to mitigate the risk. These measures include enabling audit logs for NTLM authentication, identifying applications that utilize NTLMv1, and implementing modern authentication methods such as SSO or Kerberos to replace NTLMv1.

1.  NTLM Credential Theft in Python Apps Threaten Windows
2.  Hackers Exploit Jupyter Servers for Illegal Sports Streaming
3.  7-Zip Exploit Code Traced to AI-Generated Misinterpretation
4.  Critical Windows Zero-Day Alert: No Patch Available for Users
5.  Fabrice Malware on PyPI Stealing AWS Credentials for 3 Years

Top/Featured Image via FreePik

Researchers Warn of NTLMv1 Bypass in Active Directory Policy

Technology is changing the global economy, and fintech companies are at the backbone of this transformation. To keep…

Technology is changing the global economy, and fintech companies are at the backbone of this transformation. To keep up, businesses need to understand that while complex regulations may sound difficult to deal with; cybersecurity threats are the real danger to their credibility and success. Here are six strategies that showcase how the change in financial technology impacts expansion and security.

**1\. **Using Data Analytics for Smarter Security and Personalization****

Fintech companies have access to a treasure trove of user data, making data analytics a key to both innovation and security. Predictive analytics can detect fraud in real time by spotting unusual transaction patterns, while personalization algorithms offer customized financial solutions to users.

Take PayPal, for instance, which uses machine learning to track fraud attempts while ensuring seamless user experiences. By investing in platforms like Tableau or Splunk, companies can not only improve data-driven decisions but also strengthen their cybersecurity protection.

**2\. **Optimizing Customer Journeys Through AI and Automation****

Customer retention in fintech depends on efficient, user-friendly platforms. AI-driven Client Lifecycle Management (CLM) tools not only enhance customer experience but also fortify compliance with data protection laws like GDPR.

For example, automated KYC (Know Your Customer) processes can validate user identities within minutes, reducing conflict while maintaining security. Companies that leverage AI to simplify operations position themselves as leaders in convenience and trust, two critical factors in the digital financial world.

**3\. **Expanding Beyond Payments: Diversification in Fintech Offerings****

Successful fintech companies are moving beyond basic services like payments and lending to offer a wider range of products. Digital wallets, cryptocurrency trading, BNPL (Buy Now, Pay Later) options, and even ESG (Environmental, Social, and Governance)-focused investment tools are becoming standard offerings.

For instance, Square (now Block) transitioned from payment processing to include cash apps, crypto wallets, and merchant solutions. This diversification not only strengthens market positioning but also hedges against disruptions in individual sectors.

**4\. **Automating Security Protocols to Counter Cyber Threats****

While cybersecurity threats grow more sophisticated, automation in fintech security has become a necessity. Tools like automated anomaly detection, real-time threat intelligence, and AI-driven incident response systems ensure swift responses to breaches.

Take Stripe, which integrates advanced monitoring tools to detect and neutralize suspicious activity before it escalates. Automation in security protocols not only protects sensitive financial data but also boosts consumer confidence in the platform.

**5\. **Sustainability in Fintech: Balancing Growth with Responsibility****

The fintech sector is embracing sustainability through green technologies and ethical financial practices. Blockchain-based carbon credit platforms, eco-friendly payment cards, and renewable energy-backed investments are paving the way for a greener future.

Consider Mastercard’s sustainable card program, which uses biodegradable materials and supports reforestation initiatives. By integrating eco-conscious elements, fintech companies are appealing to the growing demographic of socially responsible consumers and investors.

**6\. **Risk Management with Predictive Technologies****

Managing risk (risk management) is critical in fintech, where markets and regulations can change overnight. Predictive technologies like machine learning are revolutionizing risk management by identifying vulnerabilities before they become liabilities.

For example, Robinhood employs real-time analytics to manage liquidity risks and safeguard user assets during volatile market conditions. This approach not only ensures operational stability but also reinforces trust in the brand.

The worlds of technology and finance are changing like never before, with advancements in AI, blockchain, and sustainable solutions building the future of fintech. By using data-driven security, improving operations through automation, and focusing on sustainable practices, companies can remain competitive. For fintech firms, the message is clear: innovate, adapt, and protect your operations, or risk falling behind.

1.  **Cybersecurity, Big Data and Automation Tools**
2.  **Top 9 Compliance Automation Software in 2024**
3.  **Fortifying FinTech: Building Resilient APIs for Security**
4.  **Digital Transformation in Financial Industry: The Role of Fintech**
5.  **Blockchain and Smart Contracts in Securing Digital Transactions**

Top/Featured Image via Marvin Meyer/Unsplash

6 Strategic Innovations Transforming the Fintech Industry

Cybercriminals are exploiting the California wildfires by launching phishing scams. Learn how hackers are targeting victims with fake domains and deceptive tactics, and how to protect yourself from these cyber threats.

****SUMMARY****

*   **Cybercriminals are exploiting the California wildfires to launch phishing campaigns.**

*   **Veriti Research found fake domains like “malibu-firecom” designed to mimic legitimate services.**

*   **These domains aim to steal personal information or install malware under the guise of fire-related assistance.**
*   **Scammers are using fear and urgency to deceive victims into clicking fraudulent links.**

*   **Veriti urges heightened vigilance, though no active email campaigns have been detected yet.**

The recent California wildfires have not only devastated communities but have also become a lucrative event for cybercriminals. Exploiting the chaos and uncertainty surrounding the disaster, these malicious actors are employing sophisticated phishing tactics to take advantage of the situation.

Cybersecurity researchers at Veriti have identified numerous newly registered domains closely linked to the fires. These domains, such as “malibu-firecom” and “fire-reliefcom,” mimic legitimate services, luring unsuspecting victims with promises of fire evacuation assistance, recovery permits, and even fire coverage.

Screenshot of the homepage of one of the fake sites (Via Veriti Research)

“These domains exhibit patterns typical of phishing campaigns. Some aim to mimic official services like fire evacuation assistance, while others target specific localities, such as Malibu and Pacific Palisades. Early indications suggest these sites are being prepared to host fraudulent activities, including phishing attacks, fake donation requests, and malicious downloads,” the Veriti Research team noted in the blog post.

As per their research, these domains are likely being used to host phishing emails and websites designed to steal personal information, such as login credentials and financial details. Hackers leverage social engineering techniques, creating a sense of urgency and fear to manipulate victims into clicking on fraudulent links or downloading malicious software.

For example, a subdomain might offer “fire-related assistance” while secretly attempting to install malware on the victim’s device. This exploitation of disaster-related fears highlights the vulnerability of individuals and organizations during these critical times.

While no email campaigns utilizing these phishing domains have been identified yet, Veriti Research is actively monitoring them for any malicious activity.

The team stresses the need for people to stay alert and informed about these threats. Understanding how cybercriminals operate can help individuals and organizations protect themselves and reduce the chances of becoming victims. Here is the full list of domains Veriti Research identified within 72 hours:

fire-reliefcom

malibu-firecom

boca-on-firecom

palisades-firecom

Calfirerestorationstore

palisadesfirecoveragecom

fire-evacuation-servicecom

Pacificpalisadesrecoverycom

Lacountyfirerebuildpermitscom

1.  **Zika Virus Exploited by Scammers to Spread Malware**
2.  **#JeSuisCharlie Being Used by Hackers To Spread Malware**
3.  **Viral Facebook Links on Missing Malaysia Jet Are Malicious**
4.  **Hackers Sending Fake Ebola Virus reports in emails with Malware**
5.  **Online Scam Alert Associated with the Nepal Earthquake Disaster**
6.  **Florida Hurricane Victims Hit with Fake FEMA Claims, Malware Files**
7.  **Photos of Drowned Syrian Boy Exploited by Spammers on Facebook**
8.  **Russian Hackers hacked MH17 Crash investigators in phishing attack**

Scammers Exploit California Wildfires, Posing as Fire Relief Services

A recent cyberattack, mimicking the tactics of the notorious Black Basta ransomware group, targeted one of SlashNext’s clients.…

A recent cyberattack, mimicking the tactics of the notorious Black Basta ransomware group, targeted one of SlashNext’s clients. Within 90 minutes, 1,165 malicious emails bombarded 22 user inboxes, aiming to trick users into clicking on malicious links.

Researchers at SlashNext have published new findings revealing attackers using tactics similar to the **Black Basta ransomware gang**, targeting 22 inboxes within 90 minutes. The attack was swift and targeted, aiming to overwhelm users and bypass traditional security measures.

According to their **blog post**, shared with Hackread.com, this Black Basta-style attack utilizes a ransomware scam that deceives employees into granting remote access to their computers. 

SlashNext’s investigation of this phishing wave revealed five key tactics used by attackers: masquerading as popular platforms like WordPress and Shopify, using legitimate-looking domains to send fake account creation and subscription emails, utilizing seemingly harmless domains, using unusual characters or minor variations in subject lines, and targeting different user roles to increase attention.

The attackers first flood inboxes with seemingly legitimate emails like newsletters or payment receipts. The emails used subject lines like “Account Confirmation” and “Subscription Notice” to entice users to click malicious links, causing a sense of urgency. Attackers further employed social engineering tactics by incorporating foreign languages or odd characters to bypass basic keyword filters. 

This initial barrage creates confusion and makes it difficult to distinguish genuine emails from malicious ones. When users are overwhelmed, attackers swoop in, often via phone calls or messages impersonating IT support. By speaking confidently, they gain trust and trick users into installing remote access software like **TeamViewer or AnyDesk**. Once this software is installed, attackers gain a foothold in the system, potentially spreading malware or compromising sensitive data on the network.

Targeted Campaign Stats and the types of scams (Via SlashNext)

Fortunately, SlashNext’s Integrated Cloud Email Security (ICES) quickly identified hundreds of red flags targeting a small group of users. Within a mere 90 minutes, a whopping 1,165 emails bombarded 22 mailboxes, averaging over 50 emails per user in rapid bursts. This tactic aimed to create panic and encourage impulsive clicks.

The ICES platform’s early detection allowed the client to respond proactively and prevent the attack from spreading. SlashNext’s AI-powered security system, SEER™, proactively identified and blocked these emails in real time. SEER™ analyzes email behaviour beyond simple keyword checks, detecting suspicious patterns like encoded URLs and fake login pages. Researchers noted a sudden rise in these attacks across the web between November and December. SlashNext was the first to launch an automated AI-powered defence to handle the situation in real time.

The incident shows the increasing nature of cybersecurity threats, with attackers using sophisticated techniques to evade traditional security measures. Organizations should prioritize threat detection and response, and regular security assessments to identify vulnerabilities and improve overall security.

1.  **‘Matrix’ Hackers Deploy Massive New IoT Botnet for DDoS Attacks**
2.  Androxgh0st Botnet Integrates Mozi, Expands Attacks on IoT Flaws
3.  Russian APT29 Using NSO Group-Style Exploits in Attacks: Google
4.  Iranian Hackers Team Up with Ransomware Gangs in Attacks on US
5.  BlackByte Ransomware Exploits VMware Flaw in VPN-Based Attacks

Top/Feature Image via Freepik

Black Basta-Style Cyberattack Hits Inboxes with 1,165 Emails in 90 Minutes

Silver Spring, United States / Maryland, 15th January 2025, CyberNewsWire

**Silver Spring, United States / Maryland, January 15th, 2025, CyberNewsWire**

Aembit, the non-human identity and access management (IAM) company, unveiled the full agenda for NHIcon 2025, a virtual event dedicated to advancing non-human identity security, streaming live on Jan. 28 and headlined by industry luminary Kevin Mandia.

NHIcon 2025 is co-presented by Aembit and Veza, alongside industry partners Identity Defined Security Alliance and Cloud Security Alliance. 

Bringing together diverse viewpoints from the cybersecurity and DevSecOps communities, NHIcon 2025 will provide technical insights and practical guidance to address the challenges of securing non-human identities, such as service accounts, AI agents, and other software workloads.

The widespread adoption of cloud technologies, the growth of APIs and microservices, and the increasing scale of machine-to-machine communications have made securing non-human identities more challenging. Traditional identity management practices and tools often fail to provide adequate visibility and control, leaving critical security gaps that elevate breach risk.

As non-human identities become central to modern infrastructure, securing them has become a top priority for enterprises worldwide, with Gartner® naming machine identity management a top security trend for 2025.

> “My vision for NHIcon is that it gives organizations the opportunity to rethink – or even begin to explore for the first time – their approach to non-human identity security,” said David Goldschlag, CEO and co-founder of Aembit. “This unique event is designed to provide clear, actionable takeaways, a deeper understanding of how to secure the identities that power enterprise innovation, and the justification for prioritizing it.”

NHIcon 2025 will provide an experiential platform for interactive learning and meaningful collaboration. Attendees can openly engage with speakers, connect with a global community of identity security professionals, and uncover cutting-edge strategies for securing non-human identities in today’s fast-evolving environments.

Mandiant Founder Mandia, co-founder of Ballistic Ventures and one of the world’s most recognizable security voices, will share his perspective on the year ahead, focusing on identity security and the growing role of AI in threat landscapes.

The agenda also includes:

*   A keynote from Talha Tariq, chief security officer at HashiCorp, on zero-trust principles for non-human identities.
*   Heather Flanagan, executive director of IDPro, discusses modernizing identity standards.
*   Software Architect Victor Ronin leading a technical session titled From Hardcoded to Hardened: The 7 Stages of Non-Human Identity Maturity.
*   Ed Amoroso, CEO of TAG Cyber, shares experience in securing non-human identities in complex environments.
*   A panel featuring security leaders from Twilio, Grafana Labs, and SoFi addressing business and compliance risks tied to non-human identities.

Registration for NHIcon 2025 is free and open at NHIcon.com.

**About Aembit**

Aembit is the leading provider of workload identity and access management solutions, designed to secure non-human identities like applications, AI agents, and service accounts across on-premises, SaaS, cloud, and partner environments. Aembit’s no-code platform enables organizations to enforce access policies in real time, ensuring the security and integrity of critical infrastructure. Users can visit aembit.io and follow us on LinkedIn.

**Contact**

**Chief Marketing Officer**  
**Apurva Davé**  
**Aembit**  
**\[email protected\]**

Aembit Announces Speaker Lineup for the Inaugural NHIcon

Tel Aviv, Israel, 15th January 2025, CyberNewsWire

**Tel Aviv, Israel, January 15th, 2025, CyberNewsWire**

Sweet Security, a leader in cloud runtime detection and response, today announced the launch of its groundbreaking patent-pending Large Language Model (LLM)-powered cloud detection engine. This innovation enhances Sweet’s unified detection and response solution, enabling it to reduce cloud detection noise to an unprecedented 0.04%. Sweet uses advanced AI to help security teams navigate complex and dynamic environments with improved precision and confidence.

**Detection of Unknown Unknowns**

The introduction of Sweet’s patent-pending LLM technology transforms its ability to identify previously undetectable threats. By evaluating cloud variables and anomalies in real-time – and adapting the findings to the nuances of the particular cloud environment – Sweet’s cloud detection engine is capable of uncovering zero-day attacks and “unknown unknowns” — threats that have not been introduced or published to the world. This eliminates the need to predefine what constitutes abnormal or malicious behavior and streamlines the differentiation between unusual activity and actual attacks.

**Fast Validation/Vindication of Findings Through Incident Labels**

Sweet’s patent-pending LLM-powered cloud detection engine excels at distinguishing between “weird” but benign anomalous activity and genuine threats. Each incident is labeled as either “malicious,” “suspicious,” or “bad practice,” indicating whether the anomaly is indicative of an attack and requires further attention from SecOps or is an unusual but legitimate activity that needs to be reviewed by DevOps. Security teams can eliminate false positives, streamline workflows, and focus their attention where it matters most. The result is unparalleled operational efficiency and reduced alert fatigue.

**Actionability at Scale**

To ensure maximum usability, the new capability delivers actionable insights through:

●       Immediate mapping of “danger zones” in the environment through an intuitive heat map

●       Clear incident labeling, providing context and clarity for security analysts

●       Identification of relevant problem owners within the organization, streamlining incident response

This approach improves response times while promoting collaboration and accountability across teams.

**Scaling Application Detection and Response (ADR)**

In dynamic cloud environments, Sweet’s patent-pending LLM-powered cloud detection engine enables scalable Application Detection and Response (ADR). It does so by cross-correlating potential attack patterns with extensive application data to identify the ‘smoking gun’—those elusive signals in the data that are indicative of an attack. This capability brings clarity and precision to applications where the sheer volume of data would overwhelm rule-based approaches.

**Increased Certainty for Security Teams**

With the introduction of this capability, Sweet continues to deliver on its mission to provide clarity and control for cloud environments. By reducing noise, enhancing detection accuracy, and empowering actionable insights, Sweet increases certainty within security teams, enabling them to operate with confidence in even the most complex cloud landscapes.

> “This new capability is a game-changer for cloud security,” said Dror Kashti, CEO of Sweet Security. “By harnessing the power of LLMs, we’re not only reducing detection noise to near-zero levels but also providing security teams with the tools they need to act swiftly and decisively. This is a major leap forward in our commitment to delivering unparalleled detection and response for the cloud.”

Sweet Security is dedicated to protecting customer privacy and adheres to strict privacy standards by processing data securely and responsibly.

**About Sweet Security**

Sweet Security is the leading provider of Cloud Native Detection and Response solutions. Powered by comprehensive runtime insights and behavioral analytics, Sweet’s unified platform correlates data across application, workload, and cloud infrastructure to deliver best-of-breed real-time detections, as well as vulnerability management, identity threat management, and runtime CSPM. By analyzing baseline behaviors across different entities and utilizing its LLM-powered detection engine, Sweet reduces cloud detection noise to 0.04%, helping organizations hit a benchmark of 2-5 min MTTR for all incidents. Privately funded, Sweet is backed by Evolution Equity Partners, Munich Re Ventures, Glilot Capital Partners, CyberArk Ventures, and an elite group of angel investors.

For more information, users can visit http://sweet.security.

**Contact**

**VP of Marketing**  
**Noa Glumcher**  
**Sweet Security**  
**\[email protected\]**

Sweet Security Introduces Patent-Pending LLM-Powered Detection Engine, Reducing Cloud Detection Noise to 0.04%

CVE-2024-44243, a critical macOS vulnerability discovered recently by Microsoft, can allow attackers to bypass Apple’s System Integrity Protection…

CVE-2024-44243, a critical macOS vulnerability discovered recently by Microsoft, can allow attackers to bypass Apple’s System Integrity Protection (SIP). Learn how this vulnerability can be exploited and how to protect your devices from this threat.

A recently discovered macOS vulnerability tracked as CVE-2024-44243, has raised alarms for jeopardizing the security of Apple devices. This vulnerability, uncovered by Microsoft Threat Intelligence, allows attackers to circumvent Apple’s robust System Integrity Protection (SIP) mechanism.

****How Does It Work?****

The flaw is found in the Storage Kit daemon, allowing local attackers with root privileges to exploit low-complexity attacks. According to Microsoft’s technical blog, shared with Hackread.com, CVE-2024-44243 exploits a weakness in the macOS storage management system. By leveraging the “storagekitd” daemon, attackers can potentially load third-party kernel extensions, bypassing the strict controls imposed by SIP.  

****What are the Implications?****

System Integrity Protection (SIP) is a crucial cybersecurity measure for macOS systems, protecting against malware and attackers. Bypassing it can significantly compromise the system’s security, Microsoft noted. Such as, attackers can install malicious software at the kernel level, and gain deep access to the system and data.

Moreover, malicious software can establish a persistent presence on the system, making it difficult to remove and potentially enabling future attacks. Also, attackers could bypass TCC (Transparency, Consent, and Control), Apple’s privacy framework, allowing unauthorized access to user data and sensitive information.  The vulnerability creates a wider attack surface, enabling attackers to exploit other vulnerabilities and escalate their privileges.

****Mitigating the Threat****

Apple has released security updates to address CVE-2024-44243. All macOS users must update their systems to the latest version to patch this vulnerability.

Microsoft’s responsible disclosure to Apple and their joint efforts to address this threat highlights the importance of shared knowledge and coordinated action in safeguarding user security. 

While we focus on patching vulnerabilities to protect ourselves from cyberattacks, it is important to remember that social engineering scams remain a prevalent threat. 

A recent campaign discovered by Group-IB targeted Apple iOS and Android users with fake trading apps. These apps were designed to steal from unsuspecting cryptocurrency investors. Therefore, staying informed about the latest threats, practicing safe online habits, and keeping software updated, are essential to minimize cybersecurity risks.

Jason Soroko, Senior Fellow at Sectigo, a Scottsdale, Arizona-based provider of comprehensive certificate lifecycle management (CLM) commented on this stating, _“_This exposes the entire operating system to deeper compromise without needing physical access, threatening sensitive data and system controls._“_ 

“Security teams should ensure macOS systems are patched with the latest updates, closely monitor for unusual disk management or privileged process behaviour, and implement endpoint detection tools that watch for unsigned kernel extensions,“ Jason explained. _“_Regular integrity checks, principle-of-least-privilege policies, and strict compliance with Apple’s security guidelines further reduce exposure to this critical threat._“_

Microsoft Discovers macOS Flaw CVE-2024-44243, Bypassing SIP

Prague, Czech republic, 15th January 2025, CyberNewsWire

**Prague, Czech republic, January 15th, 2025, CyberNewsWire**

**Quantum computing is set to revolutionize technology, but it also presents a significant security risk for financial institutions. Czech cybersecurity startup Wultra has raised €3 million from Tensor Ventures, Elevator Ventures, and J&T Ventures to accelerate the development of its post-quantum authentication technology, safeguarding banks and fintech against the coming wave of quantum threats.**

The investment comes as global concern grows over the vulnerability of traditional security methods. Quantum computers will soon have the power to crack cryptography that protects billions of financial transactions daily. Wultra, whose clients already include Raiffeisen Bank International, Erste Digital, OTP Bank, and Global Payments, is at the forefront of creating secure authentication solutions that can withstand quantum-level attacks.

> “We anticipate a ‘Q-day’ within the next five years – a point where current authentication systems will become ineffective against quantum computers,” says Petr Dvořák, CEO and founder of Wultra. “Financial institutions must act now to protect their infrastructure. This investment allows us to develop next-generation solutions and deepen our presence in key banking markets that recognize the urgency of post-quantum threats.”

Dvořák is no stranger to innovation. He played a key role in building Inmite, a mobile app development firm acquired by Avast in 2014. Drawing on that experience, he founded Wultra to focus on financial security. Today, the company offers mobile-first software authentication and hardware authenticators trusted by major European banks.

****Production Strictly in the European Union****

While most of Wultra’s sales are from its smartphone software authentication solution, its hardware authenticator, Talisman, has already seen significant demand, with thousands of units delivered and tens of thousands of pre-orders. To ensure the highest level of security and compliance, all Talisman devices are manufactured and assembled within the European Union, with final production taking place in the Czech Republic.

> “Our hardware authenticator addresses the needs of corporate and premium banking clients, aligning with new PSD3 regulations that mandate alternative authentication methods beyond smartphones,” adds Petr Dvořák.

****Global Expansion and Innovation****

Numerous banks and fintech companies in several countries trust Wultra’s solutions, and adoption is especially high in Central Europe.

The €3 million investment will develop post-quantum authentication solutions and enable Wultra’s expansion into Western Europe and Southeast Asia, which are experiencing increasing adoption of digital banking. The company plans to open a Singapore office in 2025 to serve the growing demand in these regions.

> “Southeast Asia is becoming a key market for us. The region’s financial sector is evolving rapidly, and post-quantum authentication is becoming a priority,” explains Dvořák. “By next year, we aim to establish a physical presence to support our expanding client base.”

****Another investment round in two years****

The Seed+ round was led by Czech-Luxembourg deep tech fund Tensor Ventures of Roman Smola, Martin Drdul, and Petr Ulvr. “Wultra has cutting-edge technology that solves the nightmare of every banker in the world,” says Martin Drdul, co-founder of Tensor Ventures.

> “At the same time, there is no alternative to their solution that can be deployed so quickly. We also like that this is another Czech startup that shows that we can successfully export very advanced technologies from the Czech Republic to the whole world,” adds Ondrej Lipold, who was in charge of the investment at Tensor Ventures. 

> Elevator Ventures, the venture capital arm of Raiffeisen Bank International, co-led the round. Suleiman Arabiat, Principal at Elevator Ventures, comments: “Authentication is a challenging and ever-growing field, and we believe Wultra’s solid technology stack and development capabilities address the most critical challenges in securing financial institutions against future threats. We are excited to support their expansion into new markets and their trailblazing journey out of CEE to the world.”

> Returning investor J&T Ventures, which first backed Wultra in 2022, also joined the round. “We’ve supported Wultra from the early stages and have been consistently impressed by their technology and market growth,” says Adam Kočík, Partner at J&T Ventures. “As quantum threats become more pressing for the financial sector, Wultra’s solutions are positioned to become essential infrastructure for banks and fintechs. This round reinforces our belief in their growth potential and ability to lead the industry into the post-quantum era.”

Another investment round will likely occur within two years.

****About Wultra****

Wultra provides easy-to-deploy post-quantum authentication solutions for financial institutions, ensuring secure and seamless access to digital services. Its developer-friendly technology, powered by NIST-endorsed quantum-resistant cryptography, delivers bulletproof security, a passwordless user experience, and compliance with global regulations—all deployable in just eight weeks. Trusted by financial institutions worldwide, Wultra’s solutions meet stringent standards like PSD3/PSR1 and eIDAS 2.0 while offering cutting-edge protection against evolving cyber threats. For more information, visit www.wultra.com.

****About Tensor Ventures****

Tensor Ventures is a global deep tech fund headquartered in Prague and Luxembourg, founded by Roman Smola, Martin Drdul, and Petr Ulvr. The first fund supported revolutionary early-stage deep tech startups, building a portfolio of over 20 companies across Europe, the UK, Israel, the USA, and beyond. Notable successes include Tatum, Veracity Protocol, and QC82 quantum chips. The second fund, Tensor Ventures, is targeting a size of EUR 50 million and will again allow investors to tap into unique quantum technologies, biotechnology, security technologies, software 2.0, and energy and climate technologies. In addition to these areas, however, there will also be an opportunity to invest in space technologies. For more information, visit www.tensor.ventures.

****About Elevator Ventures****

Elevator Ventures is the venture capital fund backed by Raiffeisen Bank International, Raiffeisen-Holding Niederösterreich-Wien, and Raiffeisen-Landesbank Steiermark and manages funds of more than 100m€ to elevate the growth of technology companies in Fintech and Beyond Banking. The team has a wide sourcing and business development network in DACH and CEE and uses the deep expertise and intel of its investors as an advantage. To date, Elevator Ventures has invested close to €50 million into 16 companies, resulting in four successful exits, and into two funds. For more information, visit www.elevator-ventures.com 

****About J&T Ventures****

Venture Capital Fund J&T Ventures invests in promising, innovative start-ups to contribute to their dynamic development and value growth. The J&T Ventures funds manage 50 million euros and provide not only financial resources, but also help to set up business strategy, business processes, support expansion to foreign markets, fundraising and managerial experience along with contacts. The fund seeks promising business projects with exceptional founders, focusing primarily on the CEE and SEE region and investing between EUR 0.5 million and EUR 2.5 million. More information at www.jtventures.cz and LinkedIn.

**Contact**

**Founder & CEO**  
**Petr Dvorak**  
**Wultra**  
**\[email protected\]**

Source

HackRead