InfoSecBulletin Cybersecurity for mankind

Cloud intrusions increased significantly in the first half of 2025, rising 136% compared to all of 2024, as reported by CrowdStrike’s 2025 Threat Hunting Report. Researchers noted that the data shows more attackers are learning to target cloud environments by exploiting misconfigurations, maintaining access, and moving laterally. The explosion in …

Bangladesh Bank has issued a public warning regarding a fraudulent website operating under the guise of the country’s official National Card Scheme, TakaPay. According to the central bank, the fake website (https://takapaycard.com) is illegally collecting sensitive personal information, including names, phone numbers, email addresses, national IDs, and passport numbers. The …

HashiCorp has recently fixed a critical vulnerability—CVE-2025-6000—in its secrets management tool, Vault. With a CVSS score of 9.1, this flaw could let privileged Vault operators run arbitrary code on the host system if misconfigured. “A privileged Vault operator within the root namespace with write permission to sys/audit may obtain code …