Friday , November 22 2024

infosecbulletin

Microsoft Teams exploiting tool on GitHub, What Microsoft say?

A new tool is available on GitHub that gives attackers a way to leverage a recently disclosed vulnerability in Microsoft Teams and automatically deliver malicious files to targeted Teams users in an organization. The tool, dubbed “TeamsPhisher,” works in environments where an organization allows communications between its internal Teams users …

Read More »

India’s health sector 2nd targeted industry by cybercriminals

Tenable says, the recent surge in cyber attacks on Indian hospitals is raising alarming concerns about the safety of healthcare and personal data. This pressing issue was brought into the limelight following the recent breach of the CoWIN portal, India’s primary platform for COVID-19 vaccine distribution, according to a report by Tenable. The …

Read More »

17 Million Instagram Accounts, 178 GB of TikTok, and Yahoo Databases Exposed

SOCRadar, a cybersecurity firm, has identified several significant database leaks, involving popular social media platforms like TikTok, Instagram, and Yahoo!. The leaked data from these platforms has surfaced on the dark web, raising concerns about user privacy and security. In the case of TikTok, SOCRadar’s Dark Web Team has detected …

Read More »

Over 300,000+ Fortinet Firewalls are Vulnerable to a Critical RCE Flaw

Hundreds of thousands of FortiGate firewalls are vulnerable to a critical security issue identified as CVE-2023-27997, almost a month after Fortinet released an update that addresses the problem. The vulnerability is a remote code execution with a severity score of 9.8 out of 10 resulting from a heap-based buffer overflow problem in FortiOS, …

Read More »

A hybrid deployment approach can be applied in Bangladesh for cloud: Anagha Mujumdar

Anagha Mujumdar, skilled with 15 years of sales experience in enterprise IT software, infrastructure, services and solutions, is now working with Trend Micro as the head-BFSI (India & SARRC). She liked to talk about cloud adoption specially in Southeast Asia. She faced an interview with InfoSecBulletin on the emerging technology, …

Read More »

Decrypter released for Akira ransomware

Akira ransomware first appeared in 2017. It targeted video folders and encrypted the files without leaving any ransom notes. The encrypted files had the extension “.akira”. Researchers have been working on decrypting the files affected by Akira ransomware, and they have finally made a breakthrough. Researchers at Avast have found …

Read More »