file systems

Winsage
March 26, 2025
Russian threat actors are exploiting a zero-day vulnerability in the Microsoft Management Console (MMC), identified as CVE-2025-26633, allowing them to bypass security features and execute harmful code. The hacking group Water Gamayun, also known as EncryptHub and Larva-208, is behind this campaign, using a weaponized version of the vulnerability called “MSC EvilTwin” to deploy various malicious payloads, including information stealers and backdoors. The vulnerability affects multiple Windows versions, particularly older systems like Windows Server 2016. The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-26633 to its Known Exploited Vulnerabilities Catalog, requiring federal agencies to patch affected systems by April 1, 2025. Microsoft included this vulnerability in its March 2025 Patch Tuesday update. Recommended mitigations include applying security patches, restricting network access to MMC ports, and monitoring for unusual MMC activity.
Winsage
March 24, 2025
GParted is a free and open-source partition management tool available on Linux, allowing users to boot directly from a flash drive without installation. It supports over a dozen file systems, including HFS, HFS+, BTRFS, and F2FS, providing versatility beyond Windows' Disk Management, which is limited to NTFS, exFAT, and FAT32. GParted enables users to manage partition flags easily, a feature not available in Windows. While it does not offer direct partition recovery options, users can use the Terminal in GParted Live to execute disk tests for locating lost partitions. GParted can run from a live USB across multiple operating systems, including Windows, Linux, and macOS, making it a flexible choice for partition management. It allows users to shrink partitions, create new ones, and recover lost partitions and files, although it is recommended for users comfortable with partition management.
Search