InfoSecBulletin Cybersecurity for mankind
A team of researchers from the University of Wisconsin-Madison has uploaded to the Chrome Web Store a proof-of-concept extension that can steal plaintext passwords from a website’s source code.
An examination of the text input fields in web browsers revealed that the coarse-grained permission model underpinning Chrome extensions violates the principles of least privilege and complete mediation.
CISA alerts to cyberattacks affecting U.S. water utilities
By infosecbulletin
/ Saturday , August 1 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of a big rise in attacks on internet-connected programmable logic controllers...
Read More
“CyberStrike” AI-Driven Security Platform for Automated Testing
By infosecbulletin
/ Friday , July 31 2026
A new open-source project named CyberStrike aims to be the first AI tool made for offensive security. It can turn...
Read More
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
By infosecbulletin
/ Friday , July 31 2026
Many countries are now showing interest to invest in the data center industry in Banglades especially in AI data centers....
Read More
NVIDIA BlueField Flaw Enables Code Execution Attacks
By infosecbulletin
/ Thursday , July 30 2026
NVIDIA has revealed a big flaw with its BlueField DPUs and ConnectX networking systems. This issue could let attackers run...
Read More
Massive customer data from India’s Bank of Baroda surfaced online
By infosecbulletin
/ Wednesday , July 29 2026
India's leading state-owned lender Bank of Baroda acknowledged Monday a security incident after reports that approximately 1 terabyte of customer...
Read More
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
By infosecbulletin
/ Tuesday , July 28 2026
CISA has put the Fortinet FortiOS vulnerability CVE-2025-68686 in its list of known exploited flaws after ongoing attacks. The flaw...
Read More
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
By infosecbulletin
/ Tuesday , July 28 2026
OpenAI's CEO Sam Altman says that AI has reached a big milestone. The technology can now make itself better, leading...
Read More
Shinyhunters claimed and set deadline to publish E&Y data
By infosecbulletin
/ Tuesday , July 28 2026
ShinyHunters has publicly claimed responsibility for the Ernst & Young (EY) data breach. The group posted a message on their...
Read More
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
By infosecbulletin
/ Monday , July 27 2026
Nvidia and over 30 tech firms started a group on Monday to create open-source AI tools for protecting against cyber...
Read More
Google Search Results Reportedly Show Claude AI Shared Chats
By infosecbulletin
/ Monday , July 27 2026
Claude's share links from Anthropic showed up in public search results. This raised new privacy worries for users who shared...
Read More
Additionally, the researchers found that numerous websites with millions of visitors, including some Google and Cloudflare portals, store passwords in plaintext within the HTML source code of their web pages, allowing extensions to retrieve them.
Click to read full report.
