InfoSecBulletin Cybersecurity for mankind
Misconfigured systems can spill data, which can be used by threat actors to breach a company’s systems and hijack communication channels.
In one instance, a misconfiguration issue in Swiss real estate agency Neho’s website exposed sensitive credentials for AWS, email services, communication tools, and review platforms to the public. This put the company’s internal systems and corporate communications at risk.
CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Patches
By infosecbulletin
/ Thursday , October 10 2024
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting Fortinet products to its...
Read More
Palo Alto Networks issues fix for security flaws, Including CVE-2024-9463
By infosecbulletin
/ Thursday , October 10 2024
Palo Alto Networks released a security advisory (PAN-SA-2024-0010) about several high-severity vulnerabilities in its Expedition migration tool, with CVSS scores...
Read More
Microsoft October 2024 Patch: 5 Zero-Days, 118 flaw
By infosecbulletin
/ Wednesday , October 9 2024
In its recent Patch Tuesday release, Microsoft fixed 118 vulnerabilities, including five zero-day flaws, two of which are currently being...
Read More
BD CIRT alert
Lumma C2 malware attack Bangladeshi several websites
By infosecbulletin
/ Tuesday , October 8 2024
The Cyber Threat Intelligence (CTI) Unit at BGD e-GOV CIRT has discovered a malware campaign involving the Lumma Stealer family....
Read More
Qualcomm Patched Multi Flaws, Including 0-day
By infosecbulletin
/ Monday , October 7 2024
Qualcomm's October 2024 Security Bulletin reveals critical vulnerabilities in several chipsets, including the popular Snapdragon mobile platforms and FastConnect solutions....
Read More
BD CIRT announce “Cyber Drill 2024”: Registration open
By infosecbulletin
/ Sunday , October 6 2024
BGD e-GOV CIRT is excited to announce the Financial Institutions and Critical Information Infrastructure (CII) Cyber Drill 2024, designed for...
Read More
First Half Of 2024 Report
Bangladeshi 32.4% government websites face cyber attack: NAS report
By infosecbulletin
/ Saturday , October 5 2024
National Attack Surface (NAS) report for the first half of 2024 reveals that 56.6% of cyberattacks in Bangladesh targeted educational...
Read More
Prince Ransomware Hits UK and US
By infosecbulletin
/ Saturday , October 5 2024
A new ransomware campaign is targeting individuals and organizations in the UK and US. The "Prince Ransomware" attack uses a...
Read More
CISA warns active exploit of Zimbra & Ivanti endpoint manager Vulns
By infosecbulletin
/ Friday , October 4 2024
CISA has issued an urgent alert about critical vulnerabilities being exploited in Synacor’s Zimbra Collaboration and Ivanti’s Endpoint Manager (EPM)....
Read More
A summary of “2024 State of Cybersecurity survey” by ISACA
By infosecbulletin
/ Friday , October 4 2024
ISACA 2024 survey report reveals that 66% of cybersecurity professionals find their jobs more stressful now than five years ago....
Read More
Threat actors are also targeting the healthcare sector.
An Idaho hospital and its partner clinics fell prey to an attack that forced it to redirect emergency services. The incident also impacted Idaho Falls Community Hospital and its partner hospitals.
The Dark Pink group has been active this year, amassing five new victims.
New research revealed that the Dark Pink group has been pretty active this year as it amassed five new victims. The group has targeted government, education, and military organizations in Belgium, Thailand, and Brunei.
Here are some other recent cyberattacks:
- Greece’s Education Ministry suffered a DDoS attack that disabled a centralized high school examination platform. This affected computers from 114 countries, causing outages and delays in high school exams.
- Discord communities focused on cryptocurrency were hacked after their administrators were tricked into running malicious Javascript code disguised as a web browser bookmark.
- Scammers stole $170,000 from crypto investors by hacking the Twitter account of American DJ Steve Aoki and posting a message that promoted a new cryptocurrency token, PSYOP.
- The Anonymous Sudan threat group demanded a ransom of $3 million from Scandinavian Airlines (SAS) to stop the DDoS attacks on the airline’s websites it has been conducting since February.
- Trend Micro researchers spotted similarities between the new BlackSuit ransomware and Royal ransomware, with both employing intermittent encryption techniques to accelerate the encryption process on victims’ systems.
- Threat actors were found advertising the new SeroXen RAT, on underground forums, which combines the capabilities of Quasar RAT, r77-rootkit, and the command line NirCmd. It is mostly popular in the gaming community.
- A group of Ukrainian attackers claimed to have destroyed the infrastructure and stolen the documents and project source code belonging to Skolkovo Foundation, Russia’s ‘Silicon Valley’.
