Daily Security Digest Dated 11/23/24

Every day a lot of cyberattack happenings around the world including ransomware, Malware attack, data breaches, website defacement and so on. Its our daily security digest to cover the latest happenings in the world.

Spend a bit time to read out todays update:

• Alert
• Cyber Attack

Hackers Exploits RCE flaw in Cisco Small Business Router

By infosecbulletin / Wednesday , February 26 2025

Cybersecurity researchers have discovered a campaign exploiting a remote command execution vulnerability, CVE-2023-20118, in Cisco Small Business Routers. This vulnerability...

Read More

• Alert
• Vulnerabilities

CISA Alerts For Active Exploited Zimbra and Microsoft flaw

By infosecbulletin / Wednesday , February 26 2025

CISA has added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog, urging organizations to quickly patch their systems to...

Read More

• Alert
• Cyber Attack

200 Fake GitHub Repos Attacking Developers to Deliver Malware

By infosecbulletin / Tuesday , February 25 2025

A new cyber campaign called GitVenom poses a serious risk to developers. Security researchers found over 200 fake GitHub repositories...

Read More

• Hot Topic

Renew Dubai visa within minutes with AI-powered Salama

By infosecbulletin / Tuesday , February 25 2025

Residents of Dubai can now easily renew their visas with the new AI-powered digital platform launched by the General Directorate...

Read More

• Alert
• Vulnerabilities

CVE-2024-20953
CISA Flags Oracle Agile PLM Actively Exploited Security Flaw

By infosecbulletin / Tuesday , February 25 2025

CVE-2024-20953 is a vulnerability in Oracle Agile PLM, a product lifecycle management tool. With a CVSS score of 8.8, it...

Read More

• Cyber Attack
• Data Breach

Stablecoin Bank Hacked – Hackers Stolen $49.5M

By infosecbulletin / Monday , February 24 2025

Days after the biggest crypto hack ever, another platform has experienced a major exploit. Infini Earn, a decentralized stablecoin bank,...

Read More

• Alert

CVE-2025-20029
PoC Exploit Released for F5 BIG-IP Command Injection Vuln

By infosecbulletin / Monday , February 24 2025

Security researchers have released a proof-of-concept exploit for CVE-2025-20029, a serious command injection vulnerability in F5’s BIG-IP application delivery controllers....

Read More

• Alert
• Hot Topic

By 1 April 2025
Australia Bans Kaspersky on its govt systems and devices

By infosecbulletin / Monday , February 24 2025

On February 21, the Australian Department of Home Affairs issued a directive prohibiting the installation of Kaspersky Lab products and...

Read More

• Alert
• Vulnerabilities

CISA Flags Craft CMS Code Injection Flaw Amid Active Attacks

By infosecbulletin / Sunday , February 23 2025

CISA has added a serious security flaw in the Craft content management system (CMS) to its Known Exploited Vulnerabilities catalog...

Read More

• Cyber Attack
• Data Breach
• Vulnerabilities

B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum

By infosecbulletin / Saturday , February 22 2025

On February 19, 2025, the illegal marketplace B1ack's Stash released over 1 million unique stolen credit and debit card details...

Read More

# Warning on 500K French supermarket shoppers targeted in cyberattack (Source: The Connexion )

# Hackers breach Andrew Tate’s online university—obtain chat logs and leak data on 800K users (Source: daily dot )

# Microsoft seizes 240 websites used by Egyptian phishing-as-a-service operation ‘ONNX’ (Source: The Record )

# Justice Department Seizes Cybercrime Website ‘PopeyeTools’ and Charges Its Administrators (Source: U.S. Department of Justice)

# U.S. Department of Justice reveals plan to destroy Google search monopoly (Source: ARS TECHNICA)

# Meta Shuts Down 2 Million Accounts Tied to ‘Pig Butchering’ Scams (Source: PCMag)

Malware evades Microsoft Defender and 2FA, stealing $24K in crypto (video)