InfoSecBulletin Cybersecurity for mankind
01
The University of Guelph, Canada, is notifying students of a data breach involving personal information accessed through a third-party security company. The breach exposed student IDs, names, and dates of birth.
02
The BAZAN Group, Israel’s largest oil refinery operator, experienced a cyberattack, resulting in the inaccessibility of its website from most parts of the world. The Iranian threat group, Cyber Avengers, claimed responsibility.
03
Call of Duty: Modern Warfare 2 servers were taken offline due to a self-spreading worm, Trojan:Win32 Wacatac.B!ml, targeting PC gamers. It is believed that hackers used hacked lobbies to spread the virus.
04
A data breach in Arizona’s school voucher program exposed the personal information of thousands of students. The breach occurred on ClassWallet, the platform that handles payments for Arizona’s Empowerment Scholarship Account program.
05
Ransomware delivered through URLs has become the leading method for distributing ransomware, accounting for over 77% of cases in 2022 – found Unit 42. This is followed by emails at 12%.
06
The CISA published a report, revealing that a new malware, named Submarine, was used to backdoor Barracuda ESG appliances on federal agencies’ networks by the Chinese state-sponsored UNC4841 group.
07
The Patchwork threat group, suspected to be operating on behalf of India, was spotted targeting universities and research organizations in China using a backdoor called EyeShell.
08
Threat actors were found creating fake websites hosting trojanized software installers to lure unsuspecting users into downloading the Fruity downloader malware, which ultimately installs remote trojans such as Remcos RAT.
09
The Southern Association of Independent Schools (SAIS) was found leaking 680,000 records containing health records, background checks, financial budgets, and even confidential security reports of students, parents, and teachers, via an unprotected database.
10
The Biden administration introduced a national strategy to combat cyber workforce shortages. The plan emphasizes collaboration with stakeholders, investment in scholarships and grants, and bolstering the federal cyber workforce capable of effectively defending against cyber threats.
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
