InfoSecBulletin Cybersecurity for mankind
Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so on. Its our daily security digest to cover the latest happenings in the world.
Spend a bit time to read out todays update:
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
01. DarkCloud Stealer is targeting financial firms via phishing emails with malicious RAR attachments, using MSBuild.exe injection and a PowerShell-downloaded JPG to decrypt an embedded .NET file and steal credentials from email, FTP, and browsers.
02. The Yurei ransomware has been exploiting open-source tools to enhance its capabilities, posing a significant threat to organizations by leveraging existing vulnerabilities in software.
03. The White Cobra malware, found in malicious Visual Studio Code cursor extensions, has been targeting developers by injecting harmful code into their environments.
04. A new variant of the HybridPetya ransomware has emerged, capable of bypassing UEFI Secure Boot protections, thus increasing its potential for widespread damage.
05. The BlackNevas ransomware group has been targeting organizations worldwide, primarily in the APAC region, as well as select countries in Europe and North America, using AES symmetric and RSA public-key encryption.
