InfoSecBulletin Cybersecurity for mankind

A large Azure data theft campaign is surfacing on the dark web. A hacker is offering employee lists taken from big companies around the world. The seller, operating under the alias “TheHatman,” claims to have pulled these records directly from victim organizations’ Azure and Entra tenants using compromised credentials, and the …

National Institute of Standards and Technology (NIST) demands feedback from industry and the government on how to update the National Vulnerability Database (NVD) since artificial intelligence is changing how groups find, evaluate, and fix cybersecurity problems. NIST has asked for information (RFI) about the future of the NVD. They want …

TP-Link has revealed several serious security flaws in Aginet networking products managed by ISPs. This includes mesh systems, routers, PON devices, and xDSL modems. The flaws might let attackers who can connect to the network get around checks, gain higher access, steal important data, look at device files, and run …