InfoSecBulletin Cybersecurity for mankind

The U.S. government has taken control of the ‘web3adspanels.org’ domain and the database used by cybercriminals to store stolen bank login information. Cybercriminals stole credentials from American citizens through phishing campaigns using fake ads on Google and Bing that directed users to bogus banking sites. The confirmed financial loss is …

Two new banks reported a data breach that revealed customer information due to a hack of their third-party vendor, Marquis Software Solutions. VeraBank in Texas reported that a data breach affected 37,318 clients, revealing their names and some personal information. The bank didn’t detail which personal information was stolen, but …

Fortinet warns that a three-year-old vulnerability allows attackers to bypass 2FA on FortiGate firewalls by merely altering the capitalization of usernames. The vulnerability FG-IR-19-283 (CVE-2020-12812) was reported and fixed in July 2020. Recently, it has been noted that attackers are exploiting this flaw in organizations that haven’t addressed specific configurations. …