InfoSecBulletin Cybersecurity for mankind

The FBI warned people in a Public Service Announcement Alert I-052726-PSA on May 27, 2026, that bad actors are running fake campaigns against FIFA sites before the 2026 FIFA World Cup. The campaign aims to take advantage of worldwide interest in the tournament by tricking users into visiting fake websites …

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has told U.S. federal agencies to secure their servers in four days. This is because of a serious weakness in the LiteSpeed cPanel user-end plugin that is being used in attacks. This vulnerability, called CVE-2026-48172, lets someone gain higher access due to …

A recent phishing attack aimed at FortiClient Endpoint Management Server (EMS) has used trusted admin systems to quietly install a new password thief on company devices. In May 2026, Arctic Wolf researchers found a group of bad actions using CVE-2026-35616, a flaw in FortiClient EMS that allows improper access. Attackers …