InfoSecBulletin Cybersecurity for mankind
CISA published an advisory about Industrial Control Systems (ICS) on February 22, 2024, to inform about security issues, vulnerabilities, and exploits related to ICS.
- ICSA-24-053-01 Delta Electronics CNCSoft-B DOPSoft:
EXECUTIVE SUMMARY
CVSS v3 7.8 - ATTENTION: Low attack complexity
Vendor: Delta Electronics
Equipment: CNCSoft-B DOPSoft
Vulnerability: Uncontrolled Search Path Element - RISK EVALUATION
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution. - AFFECTED PRODUCTS:
The following Delta Electronics products are affected:
Critical PHP Zero-Day Vulnerability found in Craft CMS To Gain RCE
By infosecbulletin / Sunday , December 22 2024A major security flaw in Craft CMS, a popular PHP content management system, has been found, enabling unauthenticated remote code...Read More
For US$2.6bn, Mastercard acquires threat intelligence firm Recorded Future
By infosecbulletin / Sunday , December 22 2024Mastercard has completed its acquisition of Recorded Future, an AI-based threat intelligence provider. Mastercard has acquired the company for $2.65...Read More
Eight New ICS Advisories released by CISA
By infosecbulletin / Saturday , December 21 2024CISA has released eight advisories on vulnerabilities in Industrial Control Systems (ICS). These vulnerabilities affect essential software and hardware in...Read More
Authority Denies
Hacker claim ransomware attack on Indonesia’s state bank BRIBy infosecbulletin / Friday , December 20 2024Bank Rakyat Indonesia (BRI), the largest state bank by assets, has assured customers that their data and funds are secure...Read More
London-based company “Builder.ai” reportedly exposed 1.2 TB data
By infosecbulletin / Friday , December 20 2024Cybersecurity researcher Jeremiah Fowler reported to Website Planet that he found a non-password-protected 1.2 TB dataset containing over 3 million...Read More
(CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
Sophos resolved 3 critical vulnerabilities in FirewallBy infosecbulletin / Friday , December 20 2024Sophos has fixed three separate security vulnerabilities in Sophos Firewall. The vulnerabilities CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729 present major risks, such...Read More
“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA
By infosecbulletin / Thursday , December 19 2024A time-demanding workshop on "Cybersecurity Awareness and Needs Analysis" was held on Thursday (December 19) at Bangladesh Bank Training Academy...Read More
CVE-2023-48788
Kaspersky reveals active exploitation of Fortinet VulnerabilityBy infosecbulletin / Thursday , December 19 2024Kaspersky's Global Emergency Response Team (GERT) found that attackers are exploiting a patched SQL injection vulnerability (CVE-2023-48788) in Fortinet FortiClient...Read More
U.S. Weighs Ban on Chinese-Made Router TP-Link: WSJ reports
By infosecbulletin / Wednesday , December 18 2024The US government is considering banning a well-known brand of Chinese-made home internet routers TP-Link due to concerns that they...Read More
Daily Security Update Dated: 18.12.2024
By infosecbulletin / Wednesday , December 18 2024Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so...Read More
CNCSoft-B v1.0.0.4 DOPSoft: versions prior to v4.0.0.82
