InfoSecBulletin Cybersecurity for mankind
Infosecbulletin’s daily cyber security update is a daily basis security updates across the globe. This aim is to inform the readers todays happenings in cyber world. Using various ways the information is collected and only the headlines are shown here. Users are advised to read out the full report for more information from the link attached with each headlines.
Attackers are using a modified version of Minesweeper to target financial organizations in Europe and the U.S. They are using a remote access tool called SuperOps RMM. The attack has been attributed to UAC-0188 by CERT-UA.
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Trellix discovered that cybercriminals used fake antivirus websites pretending to be Avast, Bitdefender, and Malwarebytes to spread info-stealers that aimed at Android and Windows users.
A new advanced ATM malware called EU ATM Malware has been found in Europe. It can infect around 60% of ATMs globally and has a reported success rate of 99%.
Researchers are warning about new phishing methods that use Cloudflare Workers, HTML smuggling, and generative AI to bypass security and steal user credentials.
In 2023, the FTC identified Best Buy and Geek Squad as the most impersonated brands, receiving 52,000 reports. Amazon was the second most impersonated brand, with 34,000 reports, followed by PayPal with 10,000 reports.
Cisco fixed a serious security issue in the web-based management interface of the Firepower Management Center software. The vulnerability is known as CVE-2024-20360 and has a CVSS score of 8.8.
SingCERT reported 9 critical vulnerabilities in WordPress plugins like WordPress Copymatic, Pie Register, Hash Form Drag & Drop Form Builder, and others.
Hackers are using cloud storage services like Amazon S3, Google Cloud Storage, and IBM Cloud Object Storage to host harmful websites and spread SMS phishing scams.
The White House is taking steps to improve data routing security for more than 50% of federal agencies’ IP addresses by the end of 2024. This is being done to prevent advanced attacks that manipulate the Border Gateway Protocol.
