InfoSecBulletin Cybersecurity for mankind
Fortinet released security patches for a critical vulnerability (CVE-2023-37936) involving a hard-coded cryptographic key. This flaw lets remote, unauthorized attackers use the key to execute unauthorized code through specially crafted cryptographic requests.
The use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests.
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
By infosecbulletin
/ Tuesday , August 25 2026
Bank customers looking for a login page can now fall into a trap before getting a strange email or text....
Read More
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
By infosecbulletin
/ Monday , August 24 2026
A mysterious AI model dubbed "Ox Alpha" has surfaced online and created noise within the developer community after releasing on...
Read More
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
By infosecbulletin
/ Monday , August 24 2026
A group of hackers named “Madarax” claims they have stolen and are offering to sell the personal information of about...
Read More
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
By infosecbulletin
/ Monday , August 24 2026
A new hacking technique has been demonstrated to steal data from Elon Musk's Grok AI. It uses a simple trick...
Read More
About thousands of leaked AWS keys Held Full Admin Rights
By infosecbulletin
/ Sunday , August 23 2026
More than 9,300 AWS access keys that were made public from August 2022 to August 2026 are still active, says...
Read More
US Bank investigates LockBit’s Data Breach Claims
By infosecbulletin
/ Sunday , August 23 2026
US Bank is looking into LockBit's claims about a breach and stolen data. The ransomware group says they will share...
Read More
Five new malware families actively targeting Asian Gov.t infra
By infosecbulletin
/ Friday , August 21 2026
Central Asian government agencies have been attacked in a cyber spy operation that used a small but different range of...
Read More
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
By infosecbulletin
/ Friday , August 21 2026
T-Mobile’s cybersecurity team reportedly physically cut a network cable connecting compromised infrastructure to the outside world. According to Bloomberg, the move...
Read More
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
By infosecbulletin
/ Friday , August 21 2026
Splunk has issued security fixes for 17 weaknesses in different apps and add-ons, such as Splunk MCP Server, Splunk AI...
Read More
“Zombie Card” attack revels expired Visa card may be used for contactless payments
By infosecbulletin
/ Friday , August 21 2026
Security experts have shown that expired credit cards can still be used. A study from the University of Massachusetts Amherst,...
Read More
