InfoSecBulletin Cybersecurity for mankind
CISA warns Apache Flink users about a critical vulnerability. Cybercriminals are exploiting this flaw to compromise systems.
Apache Flink is a widely used open-source platform for processing large datasets in real-time analytics, machine learning, and data-intensive applications. Its capability to handle both bounded and unbounded data streams makes it a versatile tool for organizations striving to gain insights from their data.
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
CVE-2020-17519 is a vulnerability that lets attackers read files on the local filesystem of the JobManager process. This could expose sensitive data and confidential information to malicious actors.
Organizations using Apache Flink versions 1.11.0, 1.11.1, or 1.11.2 are at risk, especially if their Flink instances are exposed to the internet or untrusted networks.
Federal agencies need to update their software to Apache Flink version 1.19.0 or later by June 13, 2024, to protect their networks from security threats.
