InfoSecBulletin Cybersecurity for mankind

Bangladesh cyber security watchdog BGD e-GOV CIRT published an advisory (27.10.2025) regarding critical romote code execution vulnarability in Microsoft WSUS CVSS score 9.8 as per NVD, NIST. CIRT has detected a serious security flaw in Microsoft’s WSUS that could let an attacker fully control a WSUS server. This vulnerability not …

A phishing technique named CoPhish misuses Microsoft Copilot Studio to deceive users into giving hackers access to their Microsoft Entra ID accounts. Datadog Security Labs identified a method that uses customizable AI agents on legitimate Microsoft domains to disguise OAuth consent attacks, making them seem trustworthy and avoiding user suspicion. …

The “CISO Best Practices Cheat Sheet” is a concise, high-level guide designed to help Chief Information Security Officers (CISOs) and senior security leaders manage and mature their organization’s information security strategy. It’s typically created by cybersecurity vendors (like Wiz, Palo Alto Networks, or SANS Institute) as a strategic reference sheet—something …