InfoSecBulletin Cybersecurity for mankind
Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so on. Its our daily security digest to cover the latest happenings in the world.
Spend a bit time to read out todays update:
Brazilian health surveillance platform breach exposes 100K+ sensitive documents
Thousands of data centers are at risk of compromise due to a 22-year-old flaw
Bangladesh Launches (CIRS) and National ICT & Cyber Security Rating System (NRS)
CVE-2026-18574
Check Point Authentication Bypass Hits Management Server
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
01. DarkCloud Stealer is targeting financial firms via phishing emails with malicious RAR attachments, using MSBuild.exe injection and a PowerShell-downloaded JPG to decrypt an embedded .NET file and steal credentials from email, FTP, and browsers.
02. The Yurei ransomware has been exploiting open-source tools to enhance its capabilities, posing a significant threat to organizations by leveraging existing vulnerabilities in software.
03. The White Cobra malware, found in malicious Visual Studio Code cursor extensions, has been targeting developers by injecting harmful code into their environments.
04. A new variant of the HybridPetya ransomware has emerged, capable of bypassing UEFI Secure Boot protections, thus increasing its potential for widespread damage.
05. The BlackNevas ransomware group has been targeting organizations worldwide, primarily in the APAC region, as well as select countries in Europe and North America, using AES symmetric and RSA public-key encryption.
