InfoSecBulletin Cybersecurity for mankind

An unprecedented surge in brute-force attacks targeting Fortinet SSL VPN infrastructure, with over 780 unique IP addresses participating in coordinated assault campaigns. The August 3rd attack represents the highest single-day volume recorded on GreyNoise’s Fortinet SSL VPN Bruteforcer tag in recent months, raising concerns about potential zero-day vulnerabilities and sophisticated …

Microsoft’s August 2025 Patch Tuesday features security updates for 107 vulnerabilities, including a zero-day flaw in Windows Kerberos. This Patch Tuesday addresses thirteen “Critical” vulnerabilities: nine related to remote code execution, three for information disclosure, and one for elevation of privileges. The number of bugs in each vulnerability category is …

In early August 2025, cybersecurity teams in Türkiye detected a new Java-based loader that avoided detection by all public sandboxes, antivirus programs, and enterprise EDR/XDR systems. A phishing campaign, known as SoupDealer, emerged, distributing a three-stage loader through files like TEKLIFALINACAKURUNLER.jar. The initial .jar file, deployed via spearphishing, reveals its …