InfoSecBulletin Cybersecurity for mankind
Some of notable happening the cyber world:
St. Cloud, Florida, experienced a ransomware attack that disrupted city services and required changes in how payments are made at some city facilities.
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets
Check Point Flaw Used to Deploy ShadowPad and Ransomware
CVE-2024-12284
Citrix Issues Security Update for NetScaler Console
CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries
Hacker chains multiple vulns to attack Palo Alto Firewall
150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain
CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh
Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru
Russian hackers Cozy Bear used fake dinner invites to attack German political parties, installing the WINELOADER backdoor.
A supply-chain attack hit the Top.gg Discord bot community, spreading malware to 170,000 developers. The attackers took over GitHub accounts to distribute harmful Python packages and created a fake Python package mirror.
A United Nations panel is looking into 58 cyberattacks by North Korean groups, such as Kimsuky, Lazarus, Andariel, and BlueNoroff, which led to around $3 billion being stolen over six years.
GitLab bought Oxeye to improve risk detection in applications and decrease incorrect alerts.
