InfoSecBulletin Cybersecurity for mankind

Google is suing 25 unidentified cybercriminals thought to be from China for running BADBOX 2.0, a major global botnet with 10 million hacked devices. BADBOX uses internet-connected Android devices like smart TVs, streamers, digital frames, car systems, projectors, and inexpensive off-brand tablets made in China and sold worldwide. It has …

Oracle’s July 2025 Critical Patch Update includes 309 new security patches, with 127 addressing remotely exploitable vulnerabilities. SecurityWeek found about 200 unique CVEs in Oracle’s July 2025 CPU, with nine patches for critical flaws. In October, Oracle Communications issued 84 security patches, the highest this month, similar to April. Out …

Cybersecurity researchers have revealed a new malware named MDifyLoader, linked to cyber attacks using security vulnerabilities in Ivanti Connect Secure (ICS) appliances. A JPCERT/CC report reveals that cybercriminals exploited CVE-2025-0282 and CVE-2025-22457 between December 2024 and July 2025 to deploy MDifyLoader, which facilitates Cobalt Strike attacks in memory. CVE-2025-0282 is …