Friday , November 22 2024

infosecbulletin

Hackers breached 20,000 FortiGate systems worldwide: MIVD

laptop

The Dutch military security service MIVD recently revealed that a cyber espionage campaign, which was initially mentioned in February, managed to gain access to around 20,000 Fortigate-secured systems between 2022 and 2023. It is now believed that this campaign “appears to be much more extensive than previously known”. The Nationaal Cyber Security …

Read More »

Riskiest Connected Devices in 2024: Forescout Report

iot

By 2028, there will be over 25 billion Internet of Things (IoT) devices. Attackers are increasingly targeting various devices, operating systems, and firmware to gain access. Forescout Technologies, a cybersecurity leader, has released a report called “The Riskiest Connected Devices in 2024.” The report is based on data from 19 million …

Read More »

Singapore-Based Absolute Telecom Allegedly Hit by Cyberattack

GhostR hacker claimed to hack Absolute Telecom PTE Ltd, a Singapore-based telecom company and stole 34 gigabytes of data including corporate information, accounting records, sales data, customer details, credit card information, and call records. In a post the bad actor claimed they infiltrated and compromised the company’s server networks on …

Read More »

SSRF Vulnerability Patched in Bitdefender GravityZone Console On-Premise

Bitdefender

Bitdefender fixed a serious vulnerability (CVE-2024-4177, CVSS 8.1) in its GravityZone Console On-Premise product. This flaw, found by security researcher Nicolas Verdier (n1nj4sec), could enable attackers to carry out server-side request forgery (SSRF) attacks, possibly resulting in unauthorized access and data breaches. GravityZone Console is a security management platform by …

Read More »

Bangladeshi “SuSastho.AI” for clinically validated answers

chart

In Bangladesh, adolescent sexual and reproductive health, rights, and mental health (SRMH) issues are some of the major challenges due to societal taboos & stigma. To address these challenges, CMED Health has developed a Generative Artificial Intelligence (AI) engine called “SuSastho.AI” to make healthcare accessible at one’s fingertips. CMED Health …

Read More »

Hacker offers 900GB of stolen data from Thai Telecom Firm

telco

The cybercriminal “kiberphant0m” offer to sell an Asian telecom company data over 900GB on the underground forum called ‘xssforums’. The hacker offer to sell full root access and other administrative login credentials. Cloudsek reported, “The breach reportedly involves a telecom provider based in Thailand, marking the third successful attack by …

Read More »

SOLARWINDS FIXED MULTIPLE FLAWS IN SERV-U

solarwind

SolarWinds released updates to fix several security issues in Serv-U and the SolarWinds Platform. These vulnerabilities impact Platform 2024.1 SR 1 and older versions. The company fixed a security issue, known as CVE-2024-28996, reported by a penetration tester from NATO. NATO Communications and Information Agency pentester Nils Putnins discovered a …

Read More »