Author: HackWatchit

Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers Pierluigi Paganini February 18, 2025 Xerox VersaLink C7025 Multifunction printer flaws could allow attackers to capture authentication credentials via pass-back attacks via LDAP and SMB/FTP services. Rapid7 researchers discovered vulnerabilities in Xerox Versalink C7025 Multifunction printers (MFPs) that could allow attackers to capture authentication credentials via pass-back attacks via LDAP and SMB/FTP services. The vulnerabilities are: CVE-2024-12511: SMB / FTP pass-back vulnerability CVE-2024-12510: LDAP pass-back vulnerability The vulnerabilities impact Xerox Versalink MFPs and Firmware Version: 57.69.91 and earlier. “While examining the Xerox Versalink C7025, Rapid7 found…

As we honor Veterans Day, it’s crucial to recognize not only the sacrifices made by those who served but also the unique cybersecurity challenges they face in today’s digital age. Veterans, with their deep ties to sensitive military information and benefits, are increasingly being targeted by cybercriminals seeking to exploit their personal data. Seven in 10 military vets and active-duty service members have been a victim of at least one digital crime. From phishing scams impersonating official VA communications to the risk of military identity theft, veterans encounter specific threats that require tailored cybersecurity awareness and precautions. By taking proactive…

What is a botnet? And what does it have to do with a toaster? We’ll get to that. First, a definition: A botnet is a group of internet-connected devices that bad actors hijack with malware. Using remote controls, bad actors can harness the power of the network to perform several types of attacks. These include distributed denial-of-service (DDoS) attacks that shut down internet services, breaking into other networks to steal data, and sending massive volumes of spam. In a way, the metaphor of an “army of devices” leveling a cyberattack works well. With thousands or even millions of compromised devices…

by Amanda Berlin of Mental Health Hackers This article was originally published in the second edition of the InfoSec Survival Guide. Find it free online HERE or order your $1 physical copy on the Spearphish General Store. Cybersecurity is a rapidly growing field, and with it, comes a number of mental health challenges above and beyond our normal day-to-day living. We are all often under a great deal of stress, as we are responsible for protecting data, environments, and more from attackers, no matter what role we are in. This can lead to burnout, imposter syndrome, high levels of anxiety,…

With the rapid expansion of digital transformation and the increasing sophistication of cyber threats, the demand for skilled cybersecurity professionals continues to rise. Organizations across industries are prioritizing security to protect sensitive data, infrastructure, and operations from cyberattacks. As we move into 2025, several cybersecurity roles will be in high demand due to emerging threats, regulatory requirements, and advancements in technology. Below are the most sought-after cybersecurity jobs in 2025: 1. Cybersecurity Analyst Cybersecurity analysts play a critical role in monitoring security systems, detecting vulnerabilities, and responding to cyber threats. They conduct risk assessments, analyze security breaches, and implement security…

In this Help Net Security, Oded Hareven, CEO of Akeyless Security, discusses how enterprises should adapt their cybersecurity strategies to address the growing need for machine-to-machine (M2M) security. According to Hareven, machine identities must be secured and governed similarly to human identities, focusing on automation and policy-as-code. How should enterprises reframe their cybersecurity strategies to account for machine-to-machine interactions? Enterprises need to recognize that machine-to-machine interactions have fundamentally different identity requirements than human-to-system interactions. Traditional identity frameworks prioritize human authentication factors such as usernames, passwords, and multi-factor authentication (MFA). However, machines require a different approach, focusing on ownership, credentials (such…

What happens when eager computer enthusiasts unknowingly download a trojanized hacking tool and find themselves on the wrong side of cybersecurity? A former employee’s actions led to chaos and raise urgent questions about the security of cultural treasures. And join us as we explore the alarming trend of social media influencers staging fake kidnappings. All this and much much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Lianne Potter from the “Compromising Positions” podcast. Warning: This podcast may contain nuts, adult themes, and rude…

Cybersecurity is much more than just a technical challenge. It’s now a critical business imperative that requires a strategic risk management approach. By integrating cybersecurity into broader risk management frameworks, you can proactively address threats, improve resilience, and align your security efforts with your core business objectives. Shifting your organization’s collective mindset around this concept is essential for long-term success in an increasingly digital and interconnected world. In contrast, organizations that treat cybersecurity as a purely technical issue often struggle with reactive measures and increased vulnerabilities. To build resilience and protect critical assets, you must shift to a risk management…

This is the first installment in a series of blogs relating to practical analysis of wireless communications: what they are, how they work, and how they can be attacked. In this post, we are going to walk through setting up the Kismet tool and performing basic analysis of 802.11x traffic.  Background  This section provides background on wireless communications and the electromagnetic spectrum. If you simply want instructions on setting up Kismet, skip to the “Setup” section.  Rather than sending messages via electrical signal going over wires, WIFI, Bluetooth, and other recent technologies utilize waves of various frequencies to transmit information.…