InfoSecBulletin Cybersecurity for mankind
The U.S. federal agency CISA has included CVE-2023-7028 in its Known Exploited Vulnerabilities Catalog. This means that the vulnerability is currently being targeted by attackers. CISA has instructed federal agencies to protect their systems by May 22, giving them a deadline of three weeks.
The U.S. cybersecurity agency hasn’t shared any information about ongoing attacks using the serious GitLab security bug. But they confirmed there is no evidence that it’s being used in ransomware attacks.
Rented bank account used to illegal transection: 5 arrested
Successfully held “InfoSecCon-2024″at Dhaka Bangladesh
Bangladeshi hacker hack for girlfriend’s expenses; finally caught
Bangladeshi Social media flooded with unauthorized withdrawals from bank accounts
Unprotected UN Database Exposes 228GB of Gender Violence Victims’ Data
Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability
Hackers Earn $500,000 on First Day of Pwn2Own Ireland 2024
Fortinet + Crowdstrike team on protection from endpoint to firewall
Sophos to Acquire Secureworks in $859M
2nd time hacker breached Internet Archive
“These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise,” CISA said today.
Private organizations using GitLab DevOps platform should also prioritize patching the vulnerability to prevent attacks.
GitLab has important data like code and API keys. If someone takes over an account, it can cause big problems. They could also insert harmful code in the CI/CD system to attack repositories.
