InfoSecBulletin Cybersecurity for mankind

A newly discovered vulnerability called “G-Door” enables malicious actors to bypass Microsoft 365 security by exploiting unmanaged Google Docs accounts. This flaw poses a serious threat to organizations using Microsoft 365’s Conditional Access policies. The G-Door vulnerability stems from the ability to create personal or workspace Google accounts using a …

Adobe has issued urgent security updates for ColdFusion versions 2023 and 2021 to fix a critical vulnerability (CVE-2024-53961). This flaw allows attackers to read arbitrary files from the system, risking exposure of sensitive data and configuration files. It results from improper path limitations, enabling unauthorized access outside the intended directory. …

Splunk, a unified security and observability platform turn its focuses on Bangladeshi market. On Monday (23 December) Splunk’s local partner “Aspire Tech Services and Solutions Ltd” arranged a day long bootcamp aims to provide comprehensive hands-on training for participants in order to familiarize them with the platform’s features, capabilities, and …