InfoSecBulletin Cybersecurity for mankind
Bangladesh Government’s Computer Incident Response Team (BGD e-GOV CIRT) proactively releases critical threat intelligence information to ensure the security of Bangladesh’s cyberspace. Following this, CIRT has recently identified critical vulnerabilities for critical information infrastructure (CII).
CIRT published cyber alert for critical information infrastructure (CII) on Thursday (23 November). The report includes the CVE of the f5, Apache, Juniper, Citrix and Atlassian ranging score from 9.8 to 10.
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
The vulnerabilities identified include F5 BIG-IP Configuration Utility Authentication Bypass, Apache ActiveMQ Deserialization of Untrusted Data, Juniper Junos OS EX Series PHP External Variable Modification, Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow, Remote Code Execution, Atlassian Confluence Data Center and Server Improper Authorization, and Atlassian Confluence Data Center and Server Broken Access Control.
The detail information are as follow:
In cyber security advice, CIRT said, to prevent increasing cyber attacks, increasing overall efficiency, taking initiatives to identify vulnerable threats, identifying causes of vulnerability and taking measures, training on cyber security, monitoring network communication logs of last six months and conducting VAPT.
To see the full report click here.
