InfoSecBulletin Cybersecurity for mankind
5 notable happenings in the world in cyber industry:
*The Space Exploration Agency of Japan jaxa experienced a cyber incident. They suspect that there was a breach in their Active Directory implementation. To control the attack, they shut down a section of their network and intranet.
Microsoft Patches Four Critical Azure and Power Apps Vulns
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
SonicWall Patches 3 Flaws in SMA 100 Devices
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day
Hacker exploited Samsung MagicINFO 9 Server RCE flaw
CISA adds Langflow flaw to its KEV catalog
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers
UAP hosted “UAP Cyber Siege 2025”, A national level cybersecurity competition
* Zimperium researchers found over 200 harmful apps in the Android malware campaign. The campaign started in July and is now targeting banks and cryptocurrency firms.
ALSO READ:
*Google released security updates for Chrome browser. These updates fix seven vulnerabilities, including one that is actively being exploited, known as the zero-day exploit (CVE-2023-6345).
*LockBit 3.0 ransomware attacked Fawry, an Egyptian e-payment provider, and stole data. Customer information may have been compromised.
*The Play ransomware group targeted 14 companies in the U.S. and three in the U.K., Netherlands, and Canada. The victims are from various sectors, including IT services, retail, real estate, and others.
