Friday , October 18 2024

infosecbulletin

‘Hell Paradise’ Claims
Government Websites in 49 Countries at Risk

dark web

According to FalconFeeds x post, a threat actor has listed 49 countries as part of an experiment. They also claim that over 1000 government sites are vulnerable. According to Cyber Express, the threat actor is promoting an onion website called ‘Hell Paradise’ which aims to obtain vulnerable government sites and …

Read More »

EU Parliament Approves Artificial Intelligence Act

EU

* Safeguards on general purpose artificial intelligence * Limits on the use of biometric identification systems by law enforcement * Bans on social scoring and AI used to manipulate or exploit user vulnerabilities * Right of consumers to launch complaints and receive meaningful explanations On Wednesday, Parliament approved the Artificial …

Read More »

Brilliant Cloud: A public cloud service provider in Bangladesh

brilliant cloud

InterCloud Limited is a company in Bangladesh that is part of a group with businesses in garment manufacturing, aviation, and telecommunications. Tusuka is known for making denim products in Bangladesh. Novoair is a premium passenger airline in Bangladesh with seven ATR-72 aircraft. In 2008, Novotel Limited started in the telecommunications …

Read More »

CISA Releases Fifteen Industrial Control Systems Advisories

industry

CISA released 15 advisories about Industrial Control Systems (ICS) on March 14, 2024. The advisories include important information about security issues, vulnerabilities, and exploits related to ICS. ICSA-24-074-01 Siemens SENTRON 7KM PAC3x20 ICSA-24-074-02 Siemens Solid Edge ICSA-24-074-03 Siemens SINEMA Remote Connect Server ICSA-24-074-04 Siemens SINEMA Remote Connect Client ICSA-24-074-05 Siemens …

Read More »

IMF email account compromised: Investigates ongoing

IMF

The International Monetary Fund (IMF) recently experienced a cyber incident, which was detected on February 16, 2024. After further investigation with help from cybersecurity experts, the breach was identified, and steps were taken to fix it. The investigation found that 11 IMF email accounts were hacked. The affected accounts have …

Read More »

StopCrypt: Most widely distributed ransomware evades detection

StopCrypt

The SonicWall Capture Labs threat research team recently observed a new variant of StopCrypt ransomware. The ransomware executes its malicious activities by utilizing multi-stage shellcodes before launching a final payload that contains the file encryption code. StopCrypt, also known as STOP Djvu, is a widely spread ransomware, as reported by …

Read More »

FCC approves Voluntary ‘Cyber Trust Mark’ For IoT Devices

FCC CHAIRWOMAN JESSICA ROSENWORCEL

The Federal Communications Commission voted to start a program for labeling wireless consumer Internet of Things products with strong cybersecurity. This means that products meeting these standards will have a “U.S Cyber Trust Mark” label, helping consumers make better choices and encouraging manufacturers to improve cybersecurity. The Commission has adopted …

Read More »

Alert
VCURMS and STRRAT Trojans deployed via AWS and GitHub

Coding

FortiGuard Labs found a phishing campaign that tricks users into downloading a malicious Java downloader to spread new VCURMS and STRRAT remote access trojans. The attackers stored malware on public services like Amazon Web Services (AWS) and GitHub to avoid detection. They used email as its command and control throughout …

Read More »