Author: HackWatchit
Microsoft warns of critical flaw in Canon printer drivers Pierluigi Paganini April 01, 2025 Microsoft’s offensive security team discovered a critical code execution vulnerability impacting Canon printer drivers. Researchers at Microsoft’s Offensive Research and Security Engineering (MORSE) team have discovered a critical code execution vulnerability, tracked as CVE-2025-1268 (CVSS score of 9.4), impacting Canon printer drivers. The vulnerability is an out-of-bounds issue that resides in certain printer drivers for production printers, office/small office multifunction printers and laser printers. The flaw impacts the EMF recode processing of Generic Plus PCL6, UFR II, LIPS4, LIPSXL, and PS printer drivers. An attacker can…
As anticipated, Russian Railways became the target of a large-scale Distributed Denial of Service (DDoS) attack, significantly impacting both its website and mobile application. The cyberattack disrupted online services, rendering them inaccessible to users for an extended period. However, despite the digital onslaught, the sale of tickets at railway transit counters and the overall functioning of the rail network remained unaffected. This indicated that the technical infrastructure responsible for railway operations was not compromised, underscoring the limited scope of the attack. The nature of the attack suggests that the hackers primarily focused on disrupting the servers hosting content related to…
ExaGrid announced three new models: the EX20, EX81, and EX135 to its line of Tiered Backup Storage appliances, as well as the release of ExaGrid software version 7.2.0. ExaGrid tiered backup storage appliance models ExaGrid’s line of 2U appliances now include eight models: EX189, EX135, EX84, EX81, EX54, EX36, EX20, and EX10 models. Each appliance has processor, memory, networking, and storage so that the backup window stays fixed-length as data grows, eliminating expensive and disruptive forklift upgrades. Up to 32 appliances can be mixed and matched in a single scale-out system. Any age or size appliance can be used in…
The European Union has recognized that its strategic autonomy and influence in space are shaped by evolving geopolitical dynamics, which can range from peaceful cooperation to competition or conflict among global powers. The agency highlights how the geopolitical landscape of space activities affects the EU’s current and future capabilities, with a strong focus on leveraging space for security and defense while addressing space-related risks. It also emphasizes that future engagement in space is subject to rapidly changing geopolitical dynamics, which could shift from collaborative efforts to heightened competition or conflict among global powers. In an in-depth analysis titled ‘EU capabilities…
Highlights Circle, the issuer of the USDC stablecoin, is preparing for a public offering expected in late April, with a valuation target of up to $5 billion. This IPO is seen as a move toward mainstream adoption and legitimacy of stablecoins within traditional finance. Circle’s IPO is expected to intensify competition with other stablecoin issuers like PayPal and Tether. Circle’s strengthened capital position could enhance its institutional services. The IPO might influence regulatory approaches and investor sentiment toward stablecoins both in the U.S. and internationally. The listing may also boost institutional and enterprise adoption of stablecoins by fostering greater transparency…
ORIGINALLY AIRED ON AUGUST 16, 2021 Articles discussed in this episode: 00:00 – BHIS | Talkin’ Bout News 2021-08-16 01:34 – Story # 1: https://youtu.be/WqD-ATqw3js 05:50 – Story # 2: https://cyberworkx.in/2021/08/11/accenture-data-is-on-darkweb-ransomware-group-threatens-to-release-it-for-public/ 09:54 – Story # 3: https://www.vice.com/en/article/akg8wg/tmobile-investigating-customer-data-breach-100-million 13:37 – Story # 4: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/announcing-the-general-availability-of-windows-365/ba-p/2595481 17:00 – Story # 4b: https://www.theverge.com/2021/8/4/22609090/microsoft-365-free-trials-cloud-pcs-demand-trials 19:56 – Story # 5: https://cyberworkx.in/2021/08/09/hacker-exploiting-authentication-bypass-bug-on-millions-of-routers/ 33:19 – Story # 6: https://techcrunch.com/2021/08/02/amazon-credit-palm-biometrics/ 40:52 – Story # 7: https://www.pcgamer.com/discord-malware-persistence-sophos-report/ 44:09 – Story # 8: https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-servers-scanned-for-proxyshell-vulnerability-patch-now/ 46:48 – Story # 9: https://portswigger.net/daily-swig/black-hat-usa-http-2-flaws-expose-organizations-to-fresh-wave-of-request-smuggling-attacks Ready to learn more? Level up your skills with affordable classes from Antisyphon! Pay-What-You-Can Training Available live/virtual and on-demand
Vanessa, can you tell us a bit about yourself? I’m a proud Texas native with a passion for learning and helping others grow. I have a Bachelor’s degree in Marketing and a Master’s in Management and Administrative Sciences, which led me to a career in training and development. Over the years, I’ve gained experience in instructional design, eLearning development, curriculum design, and training facilitation—basically, all things learning! I’m also certified in these areas because I believe in always sharpening my skills. Outside of work, I’m an active member of Alpha Kappa Alpha Sorority Inc., where I enjoy giving back to…
North Korea’s IT workers have expanded operations beyond the United States and are now increasingly targeting organizations across Europe. Also referred to as “IT warriors,” they hide their true identities and pose as workers based in other countries by connecting via laptop farms to fraudulently secure positions as remote freelance IT employees at companies worldwide to generate revenue for the Democratic People’s Republic of Korea (DPRK) regime. As security researchers with the Google Threat Intelligence Group (GTIG) found, North Korea’s IT army has increasingly targeted positions at companies in Germany, Portugal, and the United Kingdom after many of its members…
In episode 44 of The AI Fix, ChatGPT won’t build a crystal meth lab, GPT-4o improves the show’s podcast art, some students manage to screw in a lightbulb, Google releases Gemini 2.5 Pro Experimental and nobody notices, and Mark invents a clock for measuring AI time. Graham explains how ChatGPT’s love for Young Adult fiction can be used to turn it into an evil malware developer, and Mark looks at the ARC-AGI-2 benchmark and a staggering leap forward in AI intelligence. All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham Cluley…