InfoSecBulletin Cybersecurity for mankind

Hewlett Packard Enterprise (HPE) has fixed a critical vulnerability in its OneView software that allowed remote code execution. OneView is HPE’s software for managing infrastructure, helping IT admins streamline server, storage, and network management. Vietnamese researcher Nguyen Quoc Khanh (brocked200) reported the critical security flaw (CVE-2025-37164) to the company’s security …

The U.S. National Institute of Standards and Technology (NIST) has published a draft Cybersecurity Framework Profile for Artificial Intelligence to guide secure AI adoption. The draft modifies the NIST Cybersecurity Framework 2.0 to help organizations manage and communicate cybersecurity risks associated with AI. CSF 2.0 structures risk management around key …

The Zeroday Cloud hacking competition in London awarded $320,000 to researchers for showing serious remote code execution vulnerabilities in cloud infrastructure components. This is the first event focused on cloud systems, hosted by Wiz Research with Amazon Web Services, Microsoft, and Google Cloud. Researchers achieved an 85% success rate in …