A critical vulnerability, CVE-2025-1127, has been identified in over 150 Lexmark printer models, including the CX, MX, XC, and CS series. This flaw allows remote attackers to execute arbitrary code on unpatched devices by exploiting a combination of path traversal (CWE-22) and race condition (CWE-362) vulnerabilities in the embedded web server. The vulnerability has been assigned a CVSS v3.1 score of 9.1 (Critical).

https://forum.hashpwn.net/post/620

#lexmark #printer #rce #CVE20251127 #cybersecurity #news #hashpwn

Inside Job - Coinbase Faces $400M Fallout After Insider Data Breach and $20M Ransom Demand

https://forum.hashpwn.net/post/617

#coinbase #crypto #hack #breach #hashpwn #news #cybersecurity

The FBI has issued an urgent alert about a wave of sophisticated social engineering attacks where threat actors impersonate high-ranking U.S. officials using AI-generated voice cloning and malicious text messages.

https://forum.hashpwn.net/post/611

#smish #vish #ai #infosec #cybersecurity #news #hashpwn

Exodus to Drop Monero (XMR) Support by August 2025

Exodus Wallet, a popular self-custody cryptocurrency wallet, has officially announced it will discontinue support for Monero (XMR) on August 10, 2025. After this deadline, users will no longer be able to send, receive, or view XMR balances through Exodus.

What You Need to Know:
https://forum.hashpwn.net/post/607

#exodus #xmr #crypto #wallet #hashpwn #news

Spider v0.9.0 released:

Updates:
-url-match flag to filter URLs by keyword
Several small bug fixes
Go bumped to v1.24.3

https://forum.hashpwn.net/post/606

#infosec #spider #urlcrawl #hashpwn #wordlist #ngram

LockBit Ransomware Group Breached.

https://forum.hashpwn.net/post/599

#lockbit #ransomware #breach #hack #hashpwn #cybersecurity #infosec

For anyone having issues logging into hashpwn or creating a new account due to captcha not working, this issue has been fixed.

https://forum.hashpwn.net/post/591

#hashpwn #captcha

⚠️ Warning ⚠️
Kali has a new signing key! 🔑
(Manual action required! 🫣)

If you are getting:

> Missing key 827C8569F2518CC677FECA1AED65462EC8D5E4C5, which is needed to verify signature.

You need to download and install the new key manually, here’s the one-liner:

```
sudo wget https://archive.kali.org/archive-keyring.gpg -O /usr/share/keyrings/kali-archive-keyring.gpg
```

Blog post: A New Kali Linux Archive Signing Key ~ https://www.kali.org/blog/new-kali-archive-signing-key/

I am sad to announce that our friend and hashpwn moderator, Flagg, passed away a few weeks ago.

Flagg was not only a talented individual in his field, he was a good friend and will be greatly missed.

Announcements were made at hashpwn and hashmob where Flagg was an active member.

hashpwn:
https://forum.hashpwn.net/post/569

hashmob:
https://discord.com/channels/840750605860995082/850283197195354132/1363211112333447409

Rest in peace, friend.

Password crackers:

If you're still mashing up all of your wordlists into a single monolithic file for deduplication purposes ... let me suggest an option that scales better, simply by approaching the problem differently:

Deduplicate each new source as it arrives, and then add it to a repository, by removing all strings already in your repository ...and then preserve it as a separate file! (You might call this the "sort once, deduplicate often" method.)

https://blog.techsolvency.com/2025/04/managing-unique-wordlists-password-cracking.html

The key benefit: the memory usage required is a factor of the size of the new file alone, rather than of the entire corpus.

Also useful for other medium-sized "dedupe a recurring stream of new sets of strings over time" use cases.

(And if you're not doing this anymore, now you have a reference to share with the folks who still are!)

#PasswordCracking

🚀 Spider v0.8.0

New features include:

"-file" to generate n-grams from local plaintext files

"-timeout" for URL crawling

"-sort" to output n-grams by frequency

https://forum.hashpwn.net/post/52

#spider #webcrawler #wordlist #ngram #infosec #hashcracking #golang #hashpwn

CISA Warns: 2021 SonicWall SMA 100 VPN Bug (CVE‑2021‑20035) Now Weaponized for Remote Code Execution

https://forum.hashpwn.net/post/564

#CISA #SonicWall #CVE #RCE #infosec #exploit #hashpwn

4chan Hit by Major Breach: Alleged Hacker Leaks Source Code, Moderator Identities, and Disrupts Site

https://forum.hashpwn.net/post/563

#4chan #forum #infosec #hashpwn #hack #breach

ProtectEU threatens End-to-End-Encryption across VPNs, messaging apps, and secure email services.

This is part of a growing global trend where governments push for backdoors under the guise of national security. While aimed at combating crime, these proposals risk eroding digital privacy, weakening cybersecurity, and potentially driving privacy-focused services out of EU jurisdictions altogether.

https://forum.hashpwn.net/post/562

#ProtectEU #vpn #backdoor #infosec #privacy #hashpwn

With a significant number of CVEs stemming from memory safety issues in C systems programming, what is the best path forward?

#memorysafety #systemsprogramming #rust #zig #c

Threat actors are abusing SourceForge to distribute fake Microsoft add-ins that install malware on victims' computers to both mine and steal cryptocurrency.

https://www.bleepingcomputer.com/news/security/fake-microsoft-office-add-in-tools-push-malware-via-sourceforge/

hashgen v1.1.2 update

In the spirit of keeping hashgen blazingly fast, I published an optimized Base58 package:
https://pkg.go.dev/github.com/cyclone-github/base58

Switching to cyclone/base58 boosted hashgen's Base58 encode/decode performance by 500%.

Key features:

Familiar API, modeled after Go’s stdlib encoding/base64

Pure Go, no external deps

Fast, byte-slice optimized encoding/decoding

More details:
https://forum.hashpwn.net/post/542

#golang #infosec #hashgen #base58 #hashpwn #opensource

What a great Crack the Con #contest put on by #CsP! Congrats to Team #Hashmob for 1st, #Unmuddlers for 2nd, and #UNSHADE for 3rd!

https://crackthecon.com/leaderboard.php
https://forum.hashpwn.net/topic/119/crack-the-con-2025/6

#CtC #hashcracking #hashpwn

ChatGPT, the famous artificial intelligence chatbot that allows users to converse with various personalities and topics, has connectivity issues worldwide.

https://www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-is-down-worldwide-with-something-went-wrong-error/

If you're into infosec news, I'm posting daily articles from top sources over on hashpwn. Check it out:

https://forum.hashpwn.net/topic/120/infosec-news

#infosec #news #hashpwn