InfoSecBulletin Cybersecurity for mankind
CISA published an advisory about Industrial Control Systems (ICS) on February 22, 2024, to inform about security issues, vulnerabilities, and exploits related to ICS.
- ICSA-24-053-01 Delta Electronics CNCSoft-B DOPSoft:
EXECUTIVE SUMMARY
CVSS v3 7.8 - ATTENTION: Low attack complexity
Vendor: Delta Electronics
Equipment: CNCSoft-B DOPSoft
Vulnerability: Uncontrolled Search Path Element - RISK EVALUATION
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution. - AFFECTED PRODUCTS:
The following Delta Electronics products are affected:
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
By infosecbulletin / Thursday , October 1 2026Hackers to exploit a flaw in Zimbra mail servers that are connected to the Internet. They send special emails that...Read More
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
By infosecbulletin / Wednesday , September 30 2026Google has said that hackers are using two serious Citrix NetScaler security holes to get root access, set up hidden...Read More
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
By infosecbulletin / Wednesday , September 30 2026The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is alerting people about a major flaw in MikroTik RouterOS. This could...Read More
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
By infosecbulletin / Tuesday , September 29 2026Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been...Read More
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
By infosecbulletin / Tuesday , September 29 2026The JadePuffer ransomware group is attacking Azure users with agent-based attacks that gather information, steal passwords, and damage key components. The...Read More
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
By infosecbulletin / Tuesday , September 29 2026The 5th Edition of InfoSecCon-2026, a premier cybersecurity-focused event, has been successfully completed with the participation of cybersecurity professionals, technology...Read More
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
By infosecbulletin / Saturday , September 19 2026Microsoft has fixed a serious security flaw in Azure AI Foundry that could let bad actors gain privilege escalation. The...Read More
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
By infosecbulletin / Friday , September 18 2026Amazon Web Services cannot restore access to its cloud-computing facility in Bahrain and one of three data-hosting zones in the...Read More
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
By infosecbulletin / Friday , September 18 2026A threat actor is allegedly offering a private remote code execution exploit for Fortinet FortiGate SSL VPN appliances, claiming that...Read More
Anthropic prepares “Claude Money” to analyze bank account and financial data
By infosecbulletin / Thursday , September 17 2026Anthropic is making a new Claude feature called “Money.” It's a separate tab in the mobile app. The new interface...Read More
CNCSoft-B v1.0.0.4 DOPSoft: versions prior to v4.0.0.82
