InfoSecBulletin Cybersecurity for mankind
Five notable happenings today in the cyber world:
The NCSC-Switzerland said that the Play ransomware attack at Xplain impacted 65,000 important documents of the Federal Administration. The documents were from various administrative units, including the Federal Department of Justice and Police, the Federal Office of Justice, and the Federal Office of Police.
Within Minute, RamiGPT To Escalate Privilege & Gain Root Access
By infosecbulletin
/ Sunday , March 30 2025
RamiGPT is an AI security tool that targets root accounts. Using PwnTools and OpwnAI, it quickly navigated privilege escalation scenarios...
Read More
Australian fintech database exposed in 27000 records
By infosecbulletin
/ Sunday , March 30 2025
Cybersecurity researcher Jeremiah Fowler recently revealed a sensitive data exposure involving the Australian fintech company Vroom by YouX, previously known...
Read More
Over 200 Million Info Leaked Online Allegedly Belonging to X
By infosecbulletin
/ Sunday , March 30 2025
Safety Detectives' Cybersecurity Team found a forum post where a threat actor shared a .CSV file with over 200 million...
Read More
FBI investigating cyberattack at Oracle, Bloomberg News reports
By infosecbulletin
/ Saturday , March 29 2025
The Federal Bureau of Investigation (FBI) is probing the cyberattack at Oracle (ORCL.N), opens new tab that has led to...
Read More
OpenAI Offering $100K Bounties for Critical Vulns
By infosecbulletin
/ Thursday , March 27 2025
OpenAI has increased its maximum bug bounty payout to $100,000, up from $20,000, to encourage the discovery of critical vulnerabilities...
Read More
Splunk Alert User RCE and Data Leak Vulns
By infosecbulletin
/ Thursday , March 27 2025
Splunk has released a security advisory about critical vulnerabilities in Splunk Enterprise and Splunk Cloud Platform. These issues could lead...
Read More
CIRT alert Situational Awareness for Eid Holidays
By infosecbulletin
/ Thursday , March 27 2025
As the Eid holidays near, cybercriminals may try to take advantage of weakened security during this time. The CTI unit...
Read More
Cyberattack on Malaysian airports: PM rejected $10 million ransom
By infosecbulletin
/ Wednesday , March 26 2025
Operations at Kuala Lumpur International Airport (KLIA) were unaffected by a cyber attack in which hackers demanded US$10 million (S$13.4...
Read More
Micropatches released for Windows zero-day leaking NTLM hashes
By infosecbulletin
/ Wednesday , March 26 2025
Unofficial patches are available for a new Windows zero-day vulnerability that allows remote attackers to steal NTLM credentials by deceiving...
Read More
VMware Patches Authentication Bypass Flaw in Windows Tool
By infosecbulletin
/ Wednesday , March 26 2025
On Tuesday, VMware issued an urgent fix for a security flaw in its VMware Tools for Windows. CVE-2025-22230 allows a...
Read More
The NSA and CISA issued five cybersecurity bulletins about securing data in the cloud. The recommendations cover implementing IAM solutions, encryption, and key management.
A report by FS-ISAC and Akamai showed that DDoS attacks on the financial sector increased by 154% in 2023 compared to 2022, mainly due to strong botnets and cyber hacktivist groups.
Tycoon and Storm-1575 threat actors carried out spear-phishing attacks on U.S. school districts in November 2023. They used Microsoft 365 credentials to bypass MFA protections.
The Rhysida ransomware group sold data stolen from Lurie Children’s Hospital for 60 bitcoins (approximately $3.4 million) on the dark web. The hospital is working on restoring the affected systems.
