InfoSecBulletin Cybersecurity for mankind

Meta’s WhatsApp is now silently fixing security issues that could reveal users’ operating system details to attackers. Privacy issues impact over 3 billion users, allowing attackers to gather information before launching malware attacks. Understanding the Fingerprinting Threat: Security researchers found that WhatsApp’s end-to-end encryption for multiple devices unintentionally exposes device …

Threat researchers found a sophisticated attack campaign aimed at FortiWeb firewalls worldwide, using the Sliver C2 framework for ongoing access and hidden proxy setups. Analyzing exposed Silver C2 databases and logs during open-directory threat hunting on Censys revealed a coordinated attack exploiting vulnerabilities in outdated FortiWeb devices. The threat actor …

“Scattered Lapsus$ Hunters” claim to have hacked cybersecurity firm Resecurity and stolen data, but Resecurity says  the hackers only accessed a decoy honeypot with fake information. Threat actors shared screenshots on Telegram showcasing the supposed breach, asserting they had stolen employee data, internal communications, threat intelligence reports, and client information. …