CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA added 2 new vulnerabilities to its catalog of known exploited vulnerabilities, because they have proof that these vulnerabilities are being actively exploited.

CVE-2024-4610 ARM Mali GPU Kernel Driver Use-After-Free Vulnerability: 
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0.

• Alert

Apple fixes more than 30 iOS, macOS, and Safari flaws

By infosecbulletin / Wednesday , July 1 2026

Apple released security updates on Monday for iOS, macOS, and Safari. These updates fix more than thirty issues, including four...

Read More

• Vulnerabilities

Attackers exploit critical flaw in Oracle E-Business

By infosecbulletin / Tuesday , June 30 2026

Attackers are now using a flaw (called CVE-2026-46817) in the Oracle E-Business Suite (EBS) financial app, according to the security...

Read More

• Uncategorized

WhatsApp to allow usernames instead of phone numbers

By infosecbulletin / Tuesday , June 30 2026

WhatsApp is about to release a big update that may change how people communicate on the app. Soon, users can...

Read More

• International

Linux Unveils New Open Source Security Project “Akrites” For (OSS) Ecosystem

By infosecbulletin / Monday , June 29 2026

The Linux Foundation said on Thursday that they are starting a new project to fix flaws in open source software...

Read More

• Data Breach

Data breach affects 14.2 million email logins across six ISPs

By infosecbulletin / Sunday , June 28 2026

KDDI Corporation, a Japanese telecom company, revealed a data breach. Hackers got into one of its email systems that five...

Read More

• Hot Topic

Asian Two AI startups launch Mythos-like Model

By infosecbulletin / Sunday , June 28 2026

Two Asian AI companies have released new models this week that compete with Anthropic’s recently limited Mythos and Fable models,...

Read More

• Data Breach

Polymarket Hack Reportedly Results in $3 Million Theft

By infosecbulletin / Saturday , June 27 2026

Polymarket is a platform for prediction markets using cryptocurrency. It lets users bet on what might happen in real-life events...

Read More

• International

Anthropic Confirms US Infrastructure Redeployment of Claude Mythos 5

By infosecbulletin / Saturday , June 27 2026

Anthropic said that Claude Mythos 5, its strongest AI security model, will be sent back to some U.S. orgs that...

Read More

• International

Hackers Target Cloudflare-Hosted AWS Domains to Steal Console Logins

By infosecbulletin / Friday , June 26 2026

A complex phishing attack targets AWS console users by misusing Cloudflare-hosted websites to steal login details. Each domain had a nearly...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 26. 06. 2026

By infosecbulletin / Friday , June 26 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

CVE-2024-4577 PHP-CGI OS Command Injection Vulnerability:
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use “Best-Fit” behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

These vulnerabilities are commonly exploited by hackers and present high risks to government systems.