InfoSecBulletin Cybersecurity for mankind
Some of notable happening the cyber world:
St. Cloud, Florida, experienced a ransomware attack that disrupted city services and required changes in how payments are made at some city facilities.
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
Russian hackers Cozy Bear used fake dinner invites to attack German political parties, installing the WINELOADER backdoor.
A supply-chain attack hit the Top.gg Discord bot community, spreading malware to 170,000 developers. The attackers took over GitHub accounts to distribute harmful Python packages and created a fake Python package mirror.
A United Nations panel is looking into 58 cyberattacks by North Korean groups, such as Kimsuky, Lazarus, Andariel, and BlueNoroff, which led to around $3 billion being stolen over six years.
GitLab bought Oxeye to improve risk detection in applications and decrease incorrect alerts.
