InfoSecBulletin Cybersecurity for mankind
The Global Research and Analysis Team (GReAT) at Kaspersky has published quarterly summaries of advanced persistent threat (APT) activities for over six years. These summaries are based on our threat intelligence research and give a snapshot of what we have published in our private APT reports. They aim to highlight important events and findings for people to be aware of.
This is our latest installment, focusing on activities that we observed during Q3 2023.
AWS Patches Multiple Vulns in WorkSpaces, AppStream 2.0
By infosecbulletin
/ Friday , January 17 2025
Amazon Web Services (AWS) has recently fixed two major security vulnerabilities in its cloud services: Amazon WorkSpaces, Amazon AppStream 2.0,...
Read More
Malware Trends Review 2024: Ever Recorded Cyber Threats
By infosecbulletin
/ Friday , January 17 2025
Last year saw a significant rise in cyber threats, with malware becoming more advanced and attack strategies more sophisticated. A...
Read More
Botnet Exploits 13,000 MikroTik Devices Abusing Misconfigured DNS
By infosecbulletin
/ Thursday , January 16 2025
A recent Infoblox Threat Intel report reveals a sophisticated botnet that exploits DNS misconfigurations to spread malware widely. This botnet,...
Read More
CVE-2024-9042
Code Execution Vulnerability Found in Kubernetes Windows Nodes
By infosecbulletin
/ Thursday , January 16 2025
A new security flaw traced, CVE-2024-9042, poses a serious risk to Kubernetes clusters with Windows worker nodes. It has a...
Read More
Hacker leaked 15k config files and VPN passwords of FortiGate firewall device
By infosecbulletin
/ Thursday , January 16 2025
The hacking group "Belsen Group" has posted over 15,000 unique FortiGate firewall configurations online. The data dump, reportedly obtained by exploiting...
Read More
Registration open for 1st Agile Cyber Drill 2025
By infosecbulletin
/ Thursday , January 16 2025
Registration open for "1st Agile Cyber Drill-2025" scheduled for February 26, 2025 online with an awards ceremony for 9 March...
Read More
30 Days to Go for FutureCrime Summit 2025
By infosecbulletin
/ Wednesday , January 15 2025
The FutureCrime Summit 2025 is just 30 days away. This conference is the largest on technology-driven crime, covering topics like...
Read More
Microsoft January 2025 Patch, 159 Vuls, 10 Critical RCE’s
By infosecbulletin
/ Wednesday , January 15 2025
Microsoft's January Patch Tuesday update fixed 159 vulnerabilities, including 10 critical Remote Code Execution (RCE) issues. These updates are essential...
Read More
CVE-2023-37936
Fortinet released update for a critical cryptographic key vuln
By infosecbulletin
/ Tuesday , January 14 2025
Fortinet released security patches for a critical vulnerability (CVE-2023-37936) involving a hard-coded cryptographic key. This flaw lets remote, unauthorized attackers...
Read More
Millions of Accounts Vulnerable due to Google’s OAuth Flaw
By infosecbulletin
/ Tuesday , January 14 2025
A critical flaw in Google’s "Sign in with Google" system has put millions of Americans at risk of data theft....
Read More
To read full report click here.
Read more:
