InfoSecBulletin Cybersecurity for mankind

The U.S. National Institute of Standards and Technology (NIST) has published a draft Cybersecurity Framework Profile for Artificial Intelligence to guide secure AI adoption. The draft modifies the NIST Cybersecurity Framework 2.0 to help organizations manage and communicate cybersecurity risks associated with AI. CSF 2.0 structures risk management around key …

The Zeroday Cloud hacking competition in London awarded $320,000 to researchers for showing serious remote code execution vulnerabilities in cloud infrastructure components. This is the first event focused on cloud systems, hosted by Wiz Research with Amazon Web Services, Microsoft, and Google Cloud. Researchers achieved an 85% success rate in …

Cisco warned customers maximum-severity Cisco AsyncOS zero-day actively exploited in attacks targeting Secure Email Gateway (SEG) and Secure Email and Web Manager (SEWM) appliances. This yet-to-be-patched zero-day (CVE-2025-20393) affects only Cisco SEG and Cisco SEWM appliances with non-standard configurations, when the Spam Quarantine feature is enabled and exposed on the …