InfoSecBulletin Cybersecurity for mankind
- CareSource falls victim to Cl0p cyber attack, resulting in alleged leakage of patient data. CareSource, the health insurance company, recently fell victim to a malicious ransomware attack orchestrated by the notorious Cl0p group. As a result, there is a possibility that certain confidential patient data has been compromised and leaked.
ALSO READ:
“Mysterious team Bangladesh”, Group IB-report-hacktivists
Multiple Azure DevOps Vulns Allow To Inject CRLF Queries & Rebind DNS
By infosecbulletin / Monday , January 20 2025Security researchers have found several vulnerabilities in Azure DevOps that could enable attackers to inject CRLF queries and carry out...Read More
Intel holds 22 employees from one Bangladeshi University
By infosecbulletin / Monday , January 20 2025Intel Corporation is a leading semiconductor chip manufacturer, employing at least 22 graduates from the Department of Applied Chemistry and...Read More
VPN Surge 1500% in USA after TikTok Shut Down
By infosecbulletin / Sunday , January 19 2025vpnMentor’s Research Team is monitoring the potential TikTok ban in the U.S., driven by national security and data privacy issues....Read More
MITRE Launches D3FEND 1.0; The Milestone for Cybersecurity Ontology
By infosecbulletin / Saturday , January 18 2025MITRE launched D3FENDTM 1.0, a cybersecurity framework that provides a vocabulary and understanding of the cyber domain. D3FEND 1.0, funded...Read More
AWS Patches Multiple Vulns in WorkSpaces, AppStream 2.0
By infosecbulletin / Friday , January 17 2025Amazon Web Services (AWS) has recently fixed two major security vulnerabilities in its cloud services: Amazon WorkSpaces, Amazon AppStream 2.0,...Read More
Malware Trends Review 2024: Ever Recorded Cyber Threats
By infosecbulletin / Friday , January 17 2025Last year saw a significant rise in cyber threats, with malware becoming more advanced and attack strategies more sophisticated. A...Read More
Botnet Exploits 13,000 MikroTik Devices Abusing Misconfigured DNS
By infosecbulletin / Thursday , January 16 2025A recent Infoblox Threat Intel report reveals a sophisticated botnet that exploits DNS misconfigurations to spread malware widely. This botnet,...Read More
CVE-2024-9042
Code Execution Vulnerability Found in Kubernetes Windows NodesBy infosecbulletin / Thursday , January 16 2025A new security flaw traced, CVE-2024-9042, poses a serious risk to Kubernetes clusters with Windows worker nodes. It has a...Read More
Hacker leaked 15k config files and VPN passwords of FortiGate firewall device
By infosecbulletin / Thursday , January 16 2025The hacking group "Belsen Group" has posted over 15,000 unique FortiGate firewall configurations online. The data dump, reportedly obtained by exploiting...Read More
Registration open for 1st Agile Cyber Drill 2025
By infosecbulletin / Thursday , January 16 2025Registration open for "1st Agile Cyber Drill-2025" scheduled for February 26, 2025 online with an awards ceremony for 9 March...Read More
- Salesforce has been hit by a zero-day exploit that targets Meta. Attackers have successfully exploited a zero-day bug in Salesforce, capitalizing on its vulnerability to illicitly obtain confidential information from various organizations.
- The Worldcoin project is experiencing global scrutiny, leading to its suspension in Kenya. Following concerns raised by the Kenyan government about its data collection practices, the cryptocurrency project Worldcoin has been suspended in Kenya.
- Researchers have recently discovered a workaround for an extremely important vulnerability in Ivanti EPMM that was recently patched. A team of researchers has made a groundbreaking discovery—a bypass for a recently patched critical vulnerability in Ivanti EPMM. This breakthrough could potentially grant attackers unauthorized access to systems, posing a significant threat to security.
- Ongoing attacks have led to the infiltration of web shells in more than 640 Citrix servers. A multitude of Citrix Netscaler ADC and Gateway servers have fallen victim to a wave of relentless cyberattacks, leading to the infiltration of web shells.
