InfoSecBulletin Cybersecurity for mankind
- CareSource falls victim to Cl0p cyber attack, resulting in alleged leakage of patient data. CareSource, the health insurance company, recently fell victim to a malicious ransomware attack orchestrated by the notorious Cl0p group. As a result, there is a possibility that certain confidential patient data has been compromised and leaked.
ALSO READ:
“Mysterious team Bangladesh”, Group IB-report-hacktivists
Palo Alto Networks issues fix for security flaws, Including CVE-2024-9463
By infosecbulletin / Thursday , October 10 2024Palo Alto Networks released a security advisory (PAN-SA-2024-0010) about several high-severity vulnerabilities in its Expedition migration tool, with CVSS scores...Read More
Microsoft October 2024 Patch: 5 Zero-Days, 118 flaw
By infosecbulletin / Wednesday , October 9 2024In its recent Patch Tuesday release, Microsoft fixed 118 vulnerabilities, including five zero-day flaws, two of which are currently being...Read More
BD CIRT alert
Lumma C2 malware attack Bangladeshi several websitesBy infosecbulletin / Tuesday , October 8 2024The Cyber Threat Intelligence (CTI) Unit at BGD e-GOV CIRT has discovered a malware campaign involving the Lumma Stealer family....Read More
Qualcomm Patched Multi Flaws, Including 0-day
By infosecbulletin / Monday , October 7 2024Qualcomm's October 2024 Security Bulletin reveals critical vulnerabilities in several chipsets, including the popular Snapdragon mobile platforms and FastConnect solutions....Read More
BD CIRT announce “Cyber Drill 2024”: Registration open
By infosecbulletin / Sunday , October 6 2024BGD e-GOV CIRT is excited to announce the Financial Institutions and Critical Information Infrastructure (CII) Cyber Drill 2024, designed for...Read More
First Half Of 2024 Report
Bangladeshi 32.4% government websites face cyber attack: NAS reportBy infosecbulletin / Saturday , October 5 2024National Attack Surface (NAS) report for the first half of 2024 reveals that 56.6% of cyberattacks in Bangladesh targeted educational...Read More
Prince Ransomware Hits UK and US
By infosecbulletin / Saturday , October 5 2024A new ransomware campaign is targeting individuals and organizations in the UK and US. The "Prince Ransomware" attack uses a...Read More
CISA warns active exploit of Zimbra & Ivanti endpoint manager Vulns
By infosecbulletin / Friday , October 4 2024CISA has issued an urgent alert about critical vulnerabilities being exploited in Synacor’s Zimbra Collaboration and Ivanti’s Endpoint Manager (EPM)....Read More
A summary of “2024 State of Cybersecurity survey” by ISACA
By infosecbulletin / Friday , October 4 2024ISACA 2024 survey report reveals that 66% of cybersecurity professionals find their jobs more stressful now than five years ago....Read More
ISACA reveals
64% of Australian cybersecurity professionals feel increasing stressBy infosecbulletin / Friday , October 4 2024A recent study by ISACA shows that almost two-thirds of cybersecurity professionals report increasing job stress. The 2024 State of...Read More
- Salesforce has been hit by a zero-day exploit that targets Meta. Attackers have successfully exploited a zero-day bug in Salesforce, capitalizing on its vulnerability to illicitly obtain confidential information from various organizations.
- The Worldcoin project is experiencing global scrutiny, leading to its suspension in Kenya. Following concerns raised by the Kenyan government about its data collection practices, the cryptocurrency project Worldcoin has been suspended in Kenya.
- Researchers have recently discovered a workaround for an extremely important vulnerability in Ivanti EPMM that was recently patched. A team of researchers has made a groundbreaking discovery—a bypass for a recently patched critical vulnerability in Ivanti EPMM. This breakthrough could potentially grant attackers unauthorized access to systems, posing a significant threat to security.
- Ongoing attacks have led to the infiltration of web shells in more than 640 Citrix servers. A multitude of Citrix Netscaler ADC and Gateway servers have fallen victim to a wave of relentless cyberattacks, leading to the infiltration of web shells.
