InfoSecBulletin Cybersecurity for mankind
- CareSource falls victim to Cl0p cyber attack, resulting in alleged leakage of patient data. CareSource, the health insurance company, recently fell victim to a malicious ransomware attack orchestrated by the notorious Cl0p group. As a result, there is a possibility that certain confidential patient data has been compromised and leaked.
ALSO READ:
“Mysterious team Bangladesh”, Group IB-report-hacktivists
Microsoft Patches Four Critical Azure and Power Apps Vulns
By infosecbulletin / Friday , May 9 2025Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...Read More
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
By infosecbulletin / Thursday , May 8 2025The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...Read More
SonicWall Patches 3 Flaws in SMA 100 Devices
By infosecbulletin / Thursday , May 8 2025SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...Read More
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
By infosecbulletin / Thursday , May 8 2025From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...Read More
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
By infosecbulletin / Thursday , May 8 2025Cisco has issued a security advisory for a critical vulnerability in its IOS XE Software for Wireless LAN Controllers (WLCs)....Read More
CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-DayBy infosecbulletin / Wednesday , May 7 2025Attackers linked to the Play ransomware operation deployed a zero-day privilege escalation exploit during an attempted attack against an organization...Read More
Hacker exploited Samsung MagicINFO 9 Server RCE flaw
By infosecbulletin / Wednesday , May 7 2025Hackers are exploiting an unauthenticated remote code execution vulnerability in the Samsung MagicINFO 9 Server to take control of devices...Read More
CISA adds Langflow flaw to its KEV catalog
By infosecbulletin / Tuesday , May 6 2025CISA added the Langflow vulnerability, CVE-2025-3248 (CVSS score 9.8), to its Known Exploited Vulnerabilities catalog. Langflow is a popular tool...Read More
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers
By infosecbulletin / Tuesday , May 6 2025Google has released its monthly Android security updates, addressing 46 vulnerabilities, including one that has been actively exploited. CVE-2025-27363 (CVSS...Read More
UAP hosted “UAP Cyber Siege 2025”, A national level cybersecurity competition
By infosecbulletin / Tuesday , May 6 2025The Cyber Security Club, representing the Department of Computer Science and Engineering at the University of Asia Pacific (UAP), has...Read More
- Salesforce has been hit by a zero-day exploit that targets Meta. Attackers have successfully exploited a zero-day bug in Salesforce, capitalizing on its vulnerability to illicitly obtain confidential information from various organizations.
- The Worldcoin project is experiencing global scrutiny, leading to its suspension in Kenya. Following concerns raised by the Kenyan government about its data collection practices, the cryptocurrency project Worldcoin has been suspended in Kenya.
- Researchers have recently discovered a workaround for an extremely important vulnerability in Ivanti EPMM that was recently patched. A team of researchers has made a groundbreaking discovery—a bypass for a recently patched critical vulnerability in Ivanti EPMM. This breakthrough could potentially grant attackers unauthorized access to systems, posing a significant threat to security.
- Ongoing attacks have led to the infiltration of web shells in more than 640 Citrix servers. A multitude of Citrix Netscaler ADC and Gateway servers have fallen victim to a wave of relentless cyberattacks, leading to the infiltration of web shells.
