InfoSecBulletin Cybersecurity for mankind
5 notable happenings in the world in cyber industry:
*The Space Exploration Agency of Japan jaxa experienced a cyber incident. They suspect that there was a breach in their Active Directory implementation. To control the attack, they shut down a section of their network and intranet.
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks
Critical RCE Flaw Patched in Roundcube Webmail
Hacker claim Leak of Deloitte Source Code & GitHub Credentials
CISA Issued Guidance for SIEM and SOAR Implementation
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora
Australia enacts mandatory ransomware payment reporting
Why Govt Demands Foreign CCTV Firms to Submit Source Code?
CVE-2023-39780
Botnet hacks thousands of ASUS routers
Bangladesh Bank instructed using AI to prevent online gambling
* Zimperium researchers found over 200 harmful apps in the Android malware campaign. The campaign started in July and is now targeting banks and cryptocurrency firms.
ALSO READ:
*Google released security updates for Chrome browser. These updates fix seven vulnerabilities, including one that is actively being exploited, known as the zero-day exploit (CVE-2023-6345).
*LockBit 3.0 ransomware attacked Fawry, an Egyptian e-payment provider, and stole data. Customer information may have been compromised.
*The Play ransomware group targeted 14 companies in the U.S. and three in the U.K., Netherlands, and Canada. The victims are from various sectors, including IT services, retail, real estate, and others.
