InfoSecBulletin Cybersecurity for mankind
Five notable happenings today in the cyber world:
The NCSC-Switzerland said that the Play ransomware attack at Xplain impacted 65,000 important documents of the Federal Administration. The documents were from various administrative units, including the Federal Department of Justice and Police, the Federal Office of Justice, and the Federal Office of Police.
YouTube geo-blocks at least 4 Bangladeshi TV channels in India
By infosecbulletin
/ Friday , May 9 2025
YouTube has restricted access to at least four Bangladeshi television channels in India following a takedown request from the Indian...
Read More
Microsoft Patches Four Critical Azure and Power Apps Vulns
By infosecbulletin
/ Friday , May 9 2025
Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...
Read More
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
By infosecbulletin
/ Thursday , May 8 2025
The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...
Read More
SonicWall Patches 3 Flaws in SMA 100 Devices
By infosecbulletin
/ Thursday , May 8 2025
SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...
Read More
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
By infosecbulletin
/ Thursday , May 8 2025
From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...
Read More
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
By infosecbulletin
/ Thursday , May 8 2025
Cisco has issued a security advisory for a critical vulnerability in its IOS XE Software for Wireless LAN Controllers (WLCs)....
Read More
CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day
By infosecbulletin
/ Wednesday , May 7 2025
Attackers linked to the Play ransomware operation deployed a zero-day privilege escalation exploit during an attempted attack against an organization...
Read More
Hacker exploited Samsung MagicINFO 9 Server RCE flaw
By infosecbulletin
/ Wednesday , May 7 2025
Hackers are exploiting an unauthenticated remote code execution vulnerability in the Samsung MagicINFO 9 Server to take control of devices...
Read More
CISA adds Langflow flaw to its KEV catalog
By infosecbulletin
/ Tuesday , May 6 2025
CISA added the Langflow vulnerability, CVE-2025-3248 (CVSS score 9.8), to its Known Exploited Vulnerabilities catalog. Langflow is a popular tool...
Read More
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers
By infosecbulletin
/ Tuesday , May 6 2025
Google has released its monthly Android security updates, addressing 46 vulnerabilities, including one that has been actively exploited. CVE-2025-27363 (CVSS...
Read More
The NSA and CISA issued five cybersecurity bulletins about securing data in the cloud. The recommendations cover implementing IAM solutions, encryption, and key management.
A report by FS-ISAC and Akamai showed that DDoS attacks on the financial sector increased by 154% in 2023 compared to 2022, mainly due to strong botnets and cyber hacktivist groups.
Tycoon and Storm-1575 threat actors carried out spear-phishing attacks on U.S. school districts in November 2023. They used Microsoft 365 credentials to bypass MFA protections.
The Rhysida ransomware group sold data stolen from Lurie Children’s Hospital for 60 bitcoins (approximately $3.4 million) on the dark web. The hospital is working on restoring the affected systems.
