Author: HackWatchit

Microsoft says that some USB printers will start printing random text after installing Windows updates released since late January 2025. The known issue affects Windows 10 (version 22H2) and Windows 11 (versions 22H2 and 23H2), but according to an update to the Windows release health dashboard, the latest Windows 11 24H2 is not impacted. “After installing the January 2025 Windows preview update (KB5050092), released January 29, 2025, or later updates, you might observe issues with USB connected dual-mode printers that support both USB Print and IPP Over USB protocols,” Redmond explains. “You might observe that the printer unexpectedly prints random…

Joff Thyer // Introduction We have already arrived at the end of 2022; wow, that was fast. As with any industry or aspect of life, we find ourselves peering into 2023 and wondering in which direction the information security landscape will evolve. As I contemplated this idea today, I thought I would write down a few introspective thoughts myself. Firstly, the traditional security perimeter stack has evolved dramatically. We live in a world where the archaic concentric circles model — aka the moat around the castle — has completely dissolved. Anywhere from cloud migration to highly functional apps delivered directly…

Actively Exploited Zero-Day Vulnerability in Microsoft Management Console Microsoft Management Console received a patch for CVE-2025-26633, which has a severity of Important and a CVSS score of 7.0. This RCE vulnerability could allow a remote attacker to run arbitrary code on a victim machine after tricking a victim into either opening a malicious file from an email or message or navigating to an adversary-owned website. Table 1. Zero-day in Microsoft Management ConsoleSeverityCVSS ScoreCVEDescriptionImportant7.0CVE-2025-26633Microsoft Management Console Security Feature Bypass Vulnerability Actively Exploited Zero-Day Vulnerability in Windows Kernel All supported Windows servers and workstations received a patch for CVE-2025-24983, which patches Win32…

New Ballista Botnet spreads using TP-Link flaw. Is it an Italian job? Pierluigi Paganini March 12, 2025 The Ballista botnet is exploiting an unpatched TP-Link vulnerability, targeting over 6,000 Archer routers, Cato CTRL researchers warn. Cato CTRL researchers observed a new botnet, called Ballista botnet, which is exploiting a remote code execution (RCE) vulnerability, tracked as CVE-2023-1389 (CVSS score 8.8), in TP-Link Archer routers. The CVE-2023-1389 flaw is an unauthenticated command injection vulnerability that resides in the locale API of the web management interface of the TP-Link Archer AX21 router. The root cause of the problem is the lack of…

In the complex and rapidly evolving field of data security, accurate terminology is more than semantics—it defines how organizations understand, manage, and protect their information. However, many vendors blur the lines between terms like “data classification,” “categorization” and “identifiers,” often misusing them interchangeably. This confusion obscures the true value of advanced solutions, hindering businesses from achieving comprehensive data security. In this article, I will clarify the differences between traditional data classification, context-driven categorization and subcategorization, and address how some vendors’ misapplication of terms like “data classes” and “identifiers” perpetuates outdated methodologies. Misunderstanding Classification vs. Categorization With traditional data classification, many…

All organizations today rely on technology. Whether you’re a small non-profit, a government agency, a hospital, or a traditional business, digital tools power everything from communications to service delivery to data management. This dependency means that every organization, regardless of its mission or sector, faces cyber risks. For organizations heading into 2025, these cybersecurity challenges are both a pressing concern and a strategic priority. As we look toward the future, organizations must prepare for both established and emerging threats. 2025 represents another step in the ongoing evolution of cybersecurity, where vigilance against both familiar and emerging threats remains crucial. Evolution…

Everfox, a global provider of insider threat technology, announced its collaboration with the Intelligence and Homeland Security Division of General Dynamics Information Technology (GDIT) to deliver a solution to address insider threat risks. This solution operationalizes the Critical Pathway to Insider Risk (CPIR) framework by leveraging linguistic analysis and scalable algorithms. These tools support employee activity analysis to identify concerning behaviors while maintaining employee privacy, enabling organizations to mitigate risks proactively. Organizations can now detect early signs of employee dissatisfaction, a key indicator of potential insider threats. ​​Everfox, formerly Forcepoint Federal, has been defending the world’s most critical data and…

NetBird is an open-source solution that integrates a configuration-free peer-to-peer private network with centralized access control, providing a single platform to build secure private networks for your organization or home. NetBird features NetBird creates a WireGuard-based overlay network that automatically connects your machines over an encrypted tunnel. This eliminates the hassle of opening ports, complex firewall rules, VPN gateways, etc. Users gain secure remote access with granular, easily managed access policies, all from a unified interface. NetBird works across any infrastructure, ensuring security and simplicity without compromise. NetBird enhances security through support for Single Sign-On (SSO) and Multi-Factor Authentication (MFA).…

The City of Mission, Texas, has declared a state of local disaster following a major cybersecurity incident that has left the city’s computer systems vulnerable to a potential cyberattack. Mayor Norie Gonzalez Garza formally issued the declaration and sent an urgent request to Texas Governor Greg Abbott, asking him to declare a state of emergency and issue directives under Section §418.00 of the Texas Government Code to address the crisis. The incident, which was first identified on February 28, 2025, has disrupted critical city functions and raised concerns about the possible release of protected personal information, health records, and civil…