InfoSecBulletin Cybersecurity for mankind

A federal grand jury has indicted a Bangladeshi national for operating online marketplaces that sold fake identity document templates to customers worldwide, prosecutors announced today. Zahid Hasan, 29, of Dhaka, Bangladesh, faces nine federal charges for running websites that sold digital templates of fraudulent passports, social security cards, and driver’s …

A simple Python script to help organizations quickly detect exposure to CVE-2025-20393, a critical zero-day vulnerability in Cisco Secure Email Gateway (SEG) and Secure Malware Analytics (SMA). The “Cisco SMA Exposure Check” tool identifies open ports and services exploited in recent attacks, as noted in Cisco’s advisory. GitHub user StasonJatham …

Certain motherboards from ASUS, Gigabyte, MSI, and ASRock are susceptible to DMA attacks that can bypass early-boot memory protections. This security flaw has several identifiers (CVE-2025-11901, CVE-2025‑14302, CVE-2025-14303, and CVE-2025-14304)due to differences in vendor implementations. The vulnerability found by Nick Peterson and Mohamed Al-Sharifi of Riot Games in some UEFI …