InfoSecBulletin Cybersecurity for mankind
ICSA-24-121-01 Delta Electronics CNCSoft-G2 DOPSoft: Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
A single call: ShinyHunters Gained Access to 6 Million Customers’ Records
By infosecbulletin
/ Tuesday , September 8 2026
A single phone call caused one of the biggest data breaches in Dutch history. In early February 2026, the big...
Read More
The first zero-click worm to spread through WeChat calls across iOS and Android
By infosecbulletin
/ Tuesday , September 8 2026
A worm called “WeWorm” can spread through WeChat voice calls on iOS and Android. It takes over a target's WeChat...
Read More
USA Bimbo Bakeries Confirms Data Stolen in Oracle EBS Zero-Day Attack
By infosecbulletin
/ Tuesday , September 8 2026
Bimbo Bakeries USA has confirmed that hackers stole employee data by exploiting a zero-day vulnerability in Oracle’s E-Business Suite (EBS). In...
Read More
ALERT
Roundcube Webmail fixes 12 security flaws, including zero-click XSS and SSRF bypass
By infosecbulletin
/ Monday , September 7 2026
Roundcube Webmail has given security updates for its 1.6 LTS and 1.7 branches. These updates fix 12 problems that could...
Read More
New HOOKEDGE Backdoor Deployed by Hackers in European Espionage
By infosecbulletin
/ Monday , September 7 2026
Russian-backed hacker group BlueDelta, also known as APT28, Fancy Bear, and Forest Blizzard, has used a small Windows backdoor called...
Read More
Hackers Exploiting MikroTik RouterOS Flaw Gaining Network Access
By infosecbulletin
/ Monday , September 7 2026
Attackers are misusing MikroTik routers through their Secure Shell (SSH) service, which can be accessed from the internet, to take...
Read More
CrowdStrike launches SafeMind, the first agentic cybersecurity solution for defenders
By infosecbulletin
/ Sunday , September 6 2026
CrowdStrike launched CrowdStrike SafeMind, a set of special security models and tools from the CrowdStrike Cyber Superintelligence Lab. The SafeMind...
Read More
Claude, DeepSeek, and Qwen AI agents combinedly used to hit gov.t across Asia
By infosecbulletin
/ Saturday , September 5 2026
Chinese-speaking hackers have added Claude, Qwen, and DeepSeek to their hacking system to automate cyberattacks on governments and other targets...
Read More
India: C-DOT Launches 14 Local Quantum-Safe Technologies
By infosecbulletin
/ Saturday , September 5 2026
India is making its communication systems safer and stronger by launching 14 local quantum products. These products were made by...
Read More
14,000 Dahua cameras compromised: TP-Link flaws enable RCE
By infosecbulletin
/ Saturday , September 5 2026
Over 14,000 Dahua security cameras connected to the internet have been hacked in a 35-day online attack that affected devices...
Read More
ICSA-24-016-01 SEW-EURODRIVE MOVITOOLS MotionStudio (Update A): Successful exploitation of this vulnerability could result in open access to file information.
ICSA-24-109-01 Unitronics Vision Legacy Series (Update A): Successful exploitation of this vulnerability could allow an attacker to log in to the Remote HMI feature, where the PLC may be factory reset, stopped, and restarted.
CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations.
