Fortinet customers are observing attackers exploiting a patch bypass for a previously fixed critical FortiGate authentication vulnerability (CVE-2025-59718) to hack patched firewalls. One affected admins said that Fortinet has allegedly confirmed that the latest FortiOS version (7.4.10) didn’t fully address this authentication bypass vulnerability, which should’ve been patched in early …
Read More »The 10 main trends for Data centers- 2026
In 2026, the data center sector stands at a decisive crossroads, driven by rapid advancements in AI, increasing energy constraints, and rising societal expectations for sustainability. These forces are fundamentally reshaping the industry’s priorities. Below, we explore the ten major trends shaping data centers. 1) AI and energy consumption: AI …
Read More »NSA Unveils Zero Trust Implementation Guidelines
The NSA has released the first two publications in its Zero Trust Implementation Guidelines series, offering practical recommendations for organizations to implement Zero Trust security. The initiative supports the use of technologies and processes in the Department of War CIO Zero Trust Framework. Foundational Documents Released: Released on January 8, …
Read More »Malaysia’s MIDA Unveils 2026 Investment Agenda Focusing Domestic Mobilization and Execution
The Malaysian Investment Development Authority (MIDA) has started 2026 by focusing more on domestic investment, emphasizing execution and prioritizing results over approvals for a more people-oriented investment strategy. MIDA’s Chairman Tengku Datuk Seri Zafrul Tengku Abdul Aziz emphasized that in 2026, the focus will be on transforming approved investments into …
Read More »Android Banking Malware “deVixor” Targets Users with Ransomware capabilities
A new Android banking trojan called deVixor poses a serious risk to mobile users, featuring financial data theft, device surveillance, and ransomware in one malicious tool. The malware, active since October 2025, is a significant threat to Android users, luring victims with fake car websites and using Telegram for control. …
Read More »Senate Democrats urge Apple and Google to remove X due to AI-generated sexual images
Three Senate Democrats urge Apple and Google to remove X and its chatbot Grok from their app stores due to the creation and distribution of explicit non-consensual images of women and children. Senators Ron Wyden from Oregon, Ed Markey from Massachusetts, and Ben Ray Luján from New Mexico called upon …
Read More »BlueDelta Target Sophos VPN, Google, Microsoft OWA to Steal Credentials
BlueDelta conducted a complex credential-harvesting operation targeting critical infrastructure and research institutions in 2025, as revealed by an investigation from Recorded Future’s Insikt Group. The campaigns leveraged legitimate PDF documents as bait, including publications from the Gulf Research Center titled “Strategic and Political Implications for Israel and Iran: The Day …
Read More »Summit group to develop its 1st data center in Bangladesh
Bangladeshi conglomerate Summit Group is entering Bangladesh’s rapidly growing data center market and plans to start working with an external business partner within a year, its chairman told in a recent interview. The first data center would utilize the gas generation capacity of Summit Power International, the group’s energy arm …
Read More »New “WhatsApp Crypt Tool” for Encrypting and Decrypting WhatsApp Backups
Developer ElDavoo unveils a new open source tool named “WhatsApp Crypt Tools” . It makes it easier to access WhatsApp’s end-to-end encrypted backups, which hold chat histories, media, and metadata in SQLite databases or ZIP files. The wa-crypt-tools program, available on GitHub, decrypts and encrypts .crypt12, .crypt14, and .crypt15 files …
Read More »2025: Top cybersecurity and cyberattack stories
The cybersecurity landscape in 2025 saw an increase in the scale and sophistication of cyber threats. Nation-states, organized crime, and hybrid groups blurred the lines between espionage and financial crime, while supply chain weaknesses and social engineering became major attack methods. Massive data theft targeting cloud platforms like Salesforce exposed …
Read More »
InfoSecBulletin Cybersecurity for mankind