InfoSecBulletin Cybersecurity for mankind

Cybersecurity and Infrastructure Security Agency (CISA) has mandated federal agencies to protect their industrial control systems due to active exploitation. CVE-2021-26829, a vulnerability in OpenPLC ScadaBR, is now included in the KEV Catalog. This inclusion signals that threat actors are actively weaponizing this specific flaw to target operational technology (OT) …

Cybersecurity experts have identified a new Android malware dubbed BankBot YNRK, which can take control of smartphones and quickly drain bank accounts. This threat is part of a growing trend of financial trojans targeting users in Asia and Europe. The malware can mute notifications, take screenshots, read device content, and …

The French Football Federation (FFF) has reported a major cybersecurity breach that led to the theft of personal data from members and licensees. The federation announced that hackers had breached the centralized software used by football clubs to handle memberships and daily tasks. The breach happened not because of software …