InfoSecBulletin Cybersecurity for mankind
Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so on. Its our daily security digest to cover the latest happenings in the world.
Spend a bit time to read out todays update:
Blind_Virus, DU_Featherless_Bipeds and Hidden investigations top qualifier for UAP CTF
By infosecbulletin
/ Monday , April 28 2025
Blind_Virus, DU_Featherless_Bipeds and Hidden investigations team secure the 1st , 2nd and 3rd positions accordingly for online preliminary round at...
Read More
CVE-2025-43859
Request Smuggling Vulnerability in Python’s h11 HTTP Library
By infosecbulletin
/ Sunday , April 27 2025
A critical vulnerability tracked as CVE-2025-43859 has been disclosed in h11, a minimalist, I/O-agnostic HTTP/1.1 protocol library written in Python....
Read More
NVIDIA Releases Security Update For GPU Driver Vulnerabilities
By infosecbulletin
/ Saturday , April 26 2025
NVIDIA has released a software security update for its GPU Display Driver to fix multiple vulnerabilities affecting both the driver...
Read More
‘SessionShark’ ToolKit Bypasses Microsoft Office 365 MFA
By infosecbulletin
/ Saturday , April 26 2025
The SessionShark phishing kit bypasses Office 365 MFA by stealing session tokens. Experts warn about real-time attacks using fake login...
Read More
159 CVEs Exploited in Q1 2025 : 28.3% Within 24 Hours of Disclosure
By infosecbulletin
/ Friday , April 25 2025
In Q1 2025, VulnCheck identified evidence of 159 CVEs publicly disclosed for the first time as exploited in the wild....
Read More
NVIDIA NeMo Framework Vuln Allow Attackers RCE
By infosecbulletin
/ Friday , April 25 2025
The NVIDIA NeMo Framework has three vulnerabilities that could enable attackers to execute remote code, risking AI system compromise and...
Read More
Cisco Issued Urgent Security Advisories For Multiple Products
By infosecbulletin
/ Thursday , April 24 2025
Cisco issued a security advisory about a remote code execution (RCE) vulnerability (CVE-2025-32433) affecting multiple products in its portfolio due...
Read More
SonicWall patched SSLVPN Vuln Allowing Firewall Crashing
By infosecbulletin
/ Thursday , April 24 2025
SonicWall has revealed a vulnerability in its SonicOS SSLVPN Virtual Office interface that could let remote attackers crash firewall appliances....
Read More
GitLab Releases Security Update For Multiple Vulns
By infosecbulletin
/ Thursday , April 24 2025
GitLab has announced a security advisory urging users to upgrade their self-managed installations right away. Versions 17.11.1, 17.10.5, and 17.9.7...
Read More
ISPAB president “whatsapp” got hacked via phishing link
By infosecbulletin
/ Wednesday , April 23 2025
Imdadul Haque, the president of Internet Service Provider of Bangladesh (ISPAB) said, I automatically got back my WhatsApp account. What...
Read More
DeepSeek Left Database Exposed, Leaking Over 1M Records (Source: WIRED)
Hackers are hijacking WordPress sites to push Windows and Mac malware (Source: TechCrunch)
Kenya’s Business Registration Service Breached, Online Database Down (Source: NATION)
