InfoSecBulletin Cybersecurity for mankind
A cyberattack on an Israeli clearing company on Sunday left some people unable to use their credit cards for shopping for several hours. According to Times of Israel, The incident occurred less than two weeks after a similar attack briefly disrupted another credit services company.
In Sunday’s incident, a DDoS attack hit the payment company Hyp, used by various businesses in Israel such as the Maccabi health fund, taxi service Gett, food ordering app Wolt, and public transportation payment systems Rav Kav Online and Hop-On.
Micropatches released for Windows zero-day leaking NTLM hashes
VMware Patches Authentication Bypass Flaw in Windows Tool
IngressNightmare
Over 40% of cloud environments are vulnerable to RCE
(CVE-2025-29927)
Urgently Patch Your Next.js for Authorization Bypass
Oracle refutes breach after hacker claims 6 million data theft
Russian zero-day seller to offer up to $4 million for Telegram exploits
Cybercriminals Exploit Checkpoint’s Driver in a BYOVD Attack
IBM and Veeam Release Patches in AIX System and Backup
WhatsApp patched zero-click flaw exploited in spyware attacks
CVE-2025-24472
CISA Warns of Fortinet FortiOS Auth Bypass Vuln Exploited in Wild
Hyp’s Credit Guard confirmed in a statement that it was the target of a cyberattack, and said it had since blocked the attack and returned to operating as normal.
“In the last hour, we experienced a DDoS attack on some of the company’s services and the communication providers connected to us,” Credit Guard said in a statement.
“At this point, the attack was blocked, and the service returned to normal operation. We are coordinating with all security agencies to ensure continued normal operation.”
The attack also disrupted operations on Bit, a popular digital payment app by Bank Hapoalim, similar to Venmo in the US.
Cybersecurity firm Check Point, as reported by Channel 12, states that cyberattacks on Israeli companies have doubled since last year.
According to the Jerusalem post, “This suspected cyberattack follows previous attempts made by Iran to penetrate Israeli cyber defenses. In October, a similar attack targeted the national credit-based payment system.
The attack on the system, operated by Sheba (Automated Bank Services), caused delays in approving debit card payments. However, Sheba reported that its core role in the national payment system remained intact, preventing widespread market impact.”
Source: the Jerusalem post, Times of Israel
