InfoSecBulletin Cybersecurity for mankind

The US Cybersecurity and Infrastructure Security Agency (CISA) has included a vulnerability in SolarWinds Web Help Desk, known as CVE-2024-28986 (with a CVSS score of 9.8), in its catalog of Known Exploited Vulnerabilities (KEV). This week, SolarWinds fixed a vulnerability in its Web Help Desk solution for customer support. The …

Researchers found that recently the ransomware attack on the digital payment system used by many of India’s banks started with a vulnerability in Jenkins, an open-source automation system for software developers. Juniper Networks recently published a study on the abuse of CVE-2024-23897, a vulnerability in Jenkins Command Line Interface. The …

A bank employee accesses the personal information of several dozen customers. The person did that for the time being before being noticed. TD Bank reimbursed its clients after finding out that one of its employees accessed the personal information of some customers. The bank, based in New Jersey, stated that …