InfoSecBulletin Cybersecurity for mankind
- CareSource falls victim to Cl0p cyber attack, resulting in alleged leakage of patient data. CareSource, the health insurance company, recently fell victim to a malicious ransomware attack orchestrated by the notorious Cl0p group. As a result, there is a possibility that certain confidential patient data has been compromised and leaked.
ALSO READ:
“Mysterious team Bangladesh”, Group IB-report-hacktivists
Eight New ICS Advisories released by CISA
By infosecbulletin / Saturday , December 21 2024CISA has released eight advisories on vulnerabilities in Industrial Control Systems (ICS). These vulnerabilities affect essential software and hardware in...Read More
Authority Denies
Hacker claim ransomware attack on Indonesia’s state bank BRIBy infosecbulletin / Friday , December 20 2024Bank Rakyat Indonesia (BRI), the largest state bank by assets, has assured customers that their data and funds are secure...Read More
London-based company “Builder.ai” reportedly exposed 1.2 TB data
By infosecbulletin / Friday , December 20 2024Cybersecurity researcher Jeremiah Fowler reported to Website Planet that he found a non-password-protected 1.2 TB dataset containing over 3 million...Read More
(CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
Sophos resolved 3 critical vulnerabilities in FirewallBy infosecbulletin / Friday , December 20 2024Sophos has fixed three separate security vulnerabilities in Sophos Firewall. The vulnerabilities CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729 present major risks, such...Read More
“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA
By infosecbulletin / Thursday , December 19 2024A time-demanding workshop on "Cybersecurity Awareness and Needs Analysis" was held on Thursday (December 19) at Bangladesh Bank Training Academy...Read More
CVE-2023-48788
Kaspersky reveals active exploitation of Fortinet VulnerabilityBy infosecbulletin / Thursday , December 19 2024Kaspersky's Global Emergency Response Team (GERT) found that attackers are exploiting a patched SQL injection vulnerability (CVE-2023-48788) in Fortinet FortiClient...Read More
U.S. Weighs Ban on Chinese-Made Router TP-Link: WSJ reports
By infosecbulletin / Wednesday , December 18 2024The US government is considering banning a well-known brand of Chinese-made home internet routers TP-Link due to concerns that they...Read More
Daily Security Update Dated: 18.12.2024
By infosecbulletin / Wednesday , December 18 2024Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so...Read More
CISA released best practices to secure Microsoft 365 Cloud environments
By infosecbulletin / Wednesday , December 18 2024CISA has issued Binding Operational Directive (BOD) 25-01, requiring federal civilian agencies to improve the security of their Microsoft 365...Read More
Data breach! Ireland fines Meta $264 million, Australia $50m
By infosecbulletin / Wednesday , December 18 2024The Irish Data Protection Commission fined Meta €251 million ($263.6 million) for GDPR violations related to a 2018 data breach...Read More
- Salesforce has been hit by a zero-day exploit that targets Meta. Attackers have successfully exploited a zero-day bug in Salesforce, capitalizing on its vulnerability to illicitly obtain confidential information from various organizations.
- The Worldcoin project is experiencing global scrutiny, leading to its suspension in Kenya. Following concerns raised by the Kenyan government about its data collection practices, the cryptocurrency project Worldcoin has been suspended in Kenya.
- Researchers have recently discovered a workaround for an extremely important vulnerability in Ivanti EPMM that was recently patched. A team of researchers has made a groundbreaking discovery—a bypass for a recently patched critical vulnerability in Ivanti EPMM. This breakthrough could potentially grant attackers unauthorized access to systems, posing a significant threat to security.
- Ongoing attacks have led to the infiltration of web shells in more than 640 Citrix servers. A multitude of Citrix Netscaler ADC and Gateway servers have fallen victim to a wave of relentless cyberattacks, leading to the infiltration of web shells.
