InfoSecBulletin Cybersecurity for mankind
5 notable happenings in the world in cyber industry:
*The Space Exploration Agency of Japan jaxa experienced a cyber incident. They suspect that there was a breach in their Active Directory implementation. To control the attack, they shut down a section of their network and intranet.
Delay patching leaves about 50,000 Fortinet firewalls to zero-day attack
Daily Security Update Dated: 21.01.2025
126 Linux kernel Vulns Allow Attackers Exploit 78 Linux Sub-Systems
CERT-UA alerts about “security audit” requests through AnyDesk
Oracle Critical Pre-Release update addressed 320 flaw
OWASP Reveils Top 10 Smart Contract Vulnerabilities for 2025
Multiple Azure DevOps Vulns Allow To Inject CRLF Queries & Rebind DNS
Intel holds 22 employees from one Bangladeshi University
VPN Surge 1500% in USA after TikTok Shut Down
MITRE Launches D3FEND 1.0; The Milestone for Cybersecurity Ontology
* Zimperium researchers found over 200 harmful apps in the Android malware campaign. The campaign started in July and is now targeting banks and cryptocurrency firms.
ALSO READ:
*Google released security updates for Chrome browser. These updates fix seven vulnerabilities, including one that is actively being exploited, known as the zero-day exploit (CVE-2023-6345).
*LockBit 3.0 ransomware attacked Fawry, an Egyptian e-payment provider, and stole data. Customer information may have been compromised.
*The Play ransomware group targeted 14 companies in the U.S. and three in the U.K., Netherlands, and Canada. The victims are from various sectors, including IT services, retail, real estate, and others.
