Daily Cybersecurity update, November 03

*About 5,000 Okta employees had their data accessed during a third-party data breach on October 12. The breach involved stolen information, including names, Social Security numbers, and medical insurance details of both current and former employees.

*The AP News website was down because of a DDoS attack. Only some pages and story links didn’t load, but the delivery to customers and mobile apps worked fine.

• Cyber Attack

FBI investigating cyberattack at Oracle, Bloomberg News reports

By infosecbulletin / Saturday , March 29 2025

The Federal Bureau of Investigation (FBI) is probing the cyberattack at Oracle (ORCL.N), opens new tab that has led to...

Read More

• Hot Topic

OpenAI Offering $100K Bounties for Critical Vulns

By infosecbulletin / Thursday , March 27 2025

OpenAI has increased its maximum bug bounty payout to $100,000, up from $20,000, to encourage the discovery of critical vulnerabilities...

Read More

• Alert

Splunk Alert User RCE and Data Leak Vulns

By infosecbulletin / Thursday , March 27 2025

Splunk has released a security advisory about critical vulnerabilities in Splunk Enterprise and Splunk Cloud Platform. These issues could lead...

Read More

• Alert

CIRT alert Situational Awareness for Eid Holidays

By infosecbulletin / Thursday , March 27 2025

As the Eid holidays near, cybercriminals may try to take advantage of weakened security during this time. The CTI unit...

Read More

• Uncategorized

Cyberattack on Malaysian airports: PM rejected $10 million ransom

By infosecbulletin / Wednesday , March 26 2025

Operations at Kuala Lumpur International Airport (KLIA) were unaffected by a cyber attack in which hackers demanded US$10 million (S$13.4...

Read More

• Alert
• Vulnerabilities

Micropatches released for Windows zero-day leaking NTLM hashes

By infosecbulletin / Wednesday , March 26 2025

Unofficial patches are available for a new Windows zero-day vulnerability that allows remote attackers to steal NTLM credentials by deceiving...

Read More

• Alert

VMware Patches Authentication Bypass Flaw in Windows Tool

By infosecbulletin / Wednesday , March 26 2025

On Tuesday, VMware issued an urgent fix for a security flaw in its VMware Tools for Windows. CVE-2025-22230 allows a...

Read More

• Alert
• Vulnerabilities

IngressNightmare
Over 40% of cloud environments are vulnerable to RCE

By infosecbulletin / Tuesday , March 25 2025

Kubernetes users of the Ingress NGINX Controller are advised to fix four newly found remote code execution ( RCE) vulnerabilities,...

Read More

• Alert
• Vulnerabilities

(CVE-2025-29927)
Urgently Patch Your Next.js for Authorization Bypass

By infosecbulletin / Tuesday , March 25 2025

Next.js, a widely used React framework for building full-stack web applications, has fixed a serious security vulnerability. Used by many...

Read More

• Cyber Attack
• Data Breach

Oracle refutes breach after hacker claims 6 million data theft

By infosecbulletin / Sunday , March 23 2025

A hacker known as “rose87168” claims to have stolen six million records from Oracle Cloud servers. The stolen data includes...

Read More

*MITRE has released version 14 of the ATT&CK framework. It includes improvements to detections and ICS and mobile matrices. The new version covers a total of 760 software, 143 activity groups, and 24 campaigns in enterprise, mobile, and ICS matrices.

*48 malicious packages were found in the npm repository. These packages can deploy a reverse shell on compromised systems. They used legitimate names to deceive users.