InfoSecBulletin Cybersecurity for mankind

Hackers on Telegram threatened to leak Google databases unless the company fires two employees. A hacking group urged the tech giant to fire Austin Larsen and Charles Carmakal and to suspend Google Threat Intelligence Group’s investigations. The group is claimed to be a network of hackers made up of members …

Domains aimed at capitalizing on the FIFA Club World Cup 2025 in the U.S. have been discovered, signaling preparations for the upcoming 2026 World Cup. PreCrime Labs from BforeAI, a cybersecurity firm focused on proactive threat prevention, reports that many domains for the FIFA World Cup 2026 have already been registered …

A critical security flaw in the Next.js framework, marked as CVE-2025-29927, lets attackers bypass authorization, threatening web applications. This vulnerability stems from the mishandling of the x-middleware-subrequest header in Next.js middleware, which could allow unauthorized access to sensitive admin areas and protected resources. The vulnerability affects various versions of the …