InfoSecBulletin Cybersecurity for mankind
Bangladesh Government’s Computer Incident Response Team (BGD e-GOV CIRT) proactively releases critical threat intelligence information to ensure the security of Bangladesh’s cyberspace. Following this, CIRT has recently identified critical vulnerabilities for critical information infrastructure (CII).
CIRT published cyber alert for critical information infrastructure (CII) on Thursday (23 November). The report includes the CVE of the f5, Apache, Juniper, Citrix and Atlassian ranging score from 9.8 to 10.
Hacker claim Leak of Deloitte Source Code & GitHub Credentials
CISA Issued Guidance for SIEM and SOAR Implementation
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora
Australia enacts mandatory ransomware payment reporting
Why Govt Demands Foreign CCTV Firms to Submit Source Code?
CVE-2023-39780
Botnet hacks thousands of ASUS routers
Bangladesh Bank instructed using AI to prevent online gambling
251 Amazon-Hosted IPs Used in Exploit Scan for ColdFusion, Struts, and Elasticsearch
Zero-Trust Policy bypass to Exploit Vulns & Manipulate NHI Secrets
Evaly E-commerce Platform Allegedly Hacked
The vulnerabilities identified include F5 BIG-IP Configuration Utility Authentication Bypass, Apache ActiveMQ Deserialization of Untrusted Data, Juniper Junos OS EX Series PHP External Variable Modification, Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow, Remote Code Execution, Atlassian Confluence Data Center and Server Improper Authorization, and Atlassian Confluence Data Center and Server Broken Access Control.
The detail information are as follow:
In cyber security advice, CIRT said, to prevent increasing cyber attacks, increasing overall efficiency, taking initiatives to identify vulnerable threats, identifying causes of vulnerability and taking measures, training on cyber security, monitoring network communication logs of last six months and conducting VAPT.
To see the full report click here.
