InfoSecBulletin Cybersecurity for mankind

Bangladesh’s BGD e-GOV CIRT has issued a warning about a major online scam linked to MBJob / MBJOB.CC which impersonate them. This scam uses Facebook and WhatsApp, foreign phone numbers, and mobile financial services to deceive users. CIRT states that scammers are spreading fake notices about “account activation fees,” “verification …

SAP’s December security updates have fixed 14 vulnerabilities in various products, including 3 critical ones. CVE-2025-42880, a code injection flaw with a CVSS score of 9.9, is the most critical issue affecting SAP Solution Manager ST 720. “Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to …

Fortinet released security updates for critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could let attackers bypass FortiCloud SSO authentication. Threat actors can exploit the security flaws CVE-2025-59718 and CVE-2025-59719 by taking advantage of weaknesses in cryptographic signature verification in affected products using a malicious SAML message. Fortinet stated …