InfoSecBulletin Cybersecurity for mankind
Some of notable happening the cyber world:
St. Cloud, Florida, experienced a ransomware attack that disrupted city services and required changes in how payments are made at some city facilities.
CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Patches
Palo Alto Networks issues fix for security flaws, Including CVE-2024-9463
Microsoft October 2024 Patch: 5 Zero-Days, 118 flaw
BD CIRT alert
Lumma C2 malware attack Bangladeshi several websites
Qualcomm Patched Multi Flaws, Including 0-day
BD CIRT announce “Cyber Drill 2024”: Registration open
First Half Of 2024 Report
Bangladeshi 32.4% government websites face cyber attack: NAS report
Prince Ransomware Hits UK and US
CISA warns active exploit of Zimbra & Ivanti endpoint manager Vulns
A summary of “2024 State of Cybersecurity survey” by ISACA
Russian hackers Cozy Bear used fake dinner invites to attack German political parties, installing the WINELOADER backdoor.
A supply-chain attack hit the Top.gg Discord bot community, spreading malware to 170,000 developers. The attackers took over GitHub accounts to distribute harmful Python packages and created a fake Python package mirror.
A United Nations panel is looking into 58 cyberattacks by North Korean groups, such as Kimsuky, Lazarus, Andariel, and BlueNoroff, which led to around $3 billion being stolen over six years.
GitLab bought Oxeye to improve risk detection in applications and decrease incorrect alerts.
