InfoSecBulletin Cybersecurity for mankind
Researchers unveiled a new ransomware, called SEXi, that poses a threat to VMware ESXi servers. Additionally, it is believed to have scored its first victim which is a hosting provider.
Intel 471 reported a surge in smishing attacks from a group of threat actors, called The Com, which uses sophisticated social engineering tactics to target organizations in the telecommunications, IT, and industry sectors.
UK Software Firm Exposed 8 million of Healthcare Worker Records
GitHub Enterprise Server Vulns Expose Risk of Code Execution
CVE-2025-2492
ASUS warns of critical auth bypass flaw in routers
16,000+ Fortinet devices compromised with symlink backdoor, Mostly in Asia
Patch now! Critical Erlang/OTP SSH Vuln Allows UCE
CISA warns of increasing risk tied to Oracle legacy Cloud leak
CVE-2025-20236
Cisco Patches Unauthenticated RCE Flaw in Webex App
Apple released emergency security updates for 2 zero-day vulns
Oracle Released Patched for 378 flaws for April 2025
CVE-2025-24054
Hackers Exploiting NTLM Spoofing Windows Vuln the in Wild
Proofpoint’s Threat Research team identified a rise in the use of a new Latrodectus loader malware in campaigns throughout February and March. The malware is being distributed by the TA577 threat actor.
Sucuri researchers found a new variant of Magento Shoplift malware that executed a malicious script on a website to perform credit card skimming attacks and data theft.
NIST awarded nearly $3.6 million to 18 education and community organizations across 15 states in an effort to build the workforce needed to safeguard enterprises from cybersecurity threats.
