InfoSecBulletin Cybersecurity for mankind
Some of notable happening the cyber world:
St. Cloud, Florida, experienced a ransomware attack that disrupted city services and required changes in how payments are made at some city facilities.
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks
Critical RCE Flaw Patched in Roundcube Webmail
Hacker claim Leak of Deloitte Source Code & GitHub Credentials
CISA Issued Guidance for SIEM and SOAR Implementation
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora
Australia enacts mandatory ransomware payment reporting
Why Govt Demands Foreign CCTV Firms to Submit Source Code?
CVE-2023-39780
Botnet hacks thousands of ASUS routers
Bangladesh Bank instructed using AI to prevent online gambling
Russian hackers Cozy Bear used fake dinner invites to attack German political parties, installing the WINELOADER backdoor.
A supply-chain attack hit the Top.gg Discord bot community, spreading malware to 170,000 developers. The attackers took over GitHub accounts to distribute harmful Python packages and created a fake Python package mirror.
A United Nations panel is looking into 58 cyberattacks by North Korean groups, such as Kimsuky, Lazarus, Andariel, and BlueNoroff, which led to around $3 billion being stolen over six years.
GitLab bought Oxeye to improve risk detection in applications and decrease incorrect alerts.
