InfoSecBulletin Cybersecurity for mankind

On Tuesday, Bangladesh Bank organized a special award ceremony at its headquarters in Dhaka to formally recognize and honor a group of officials from Pan Asia Banking Corporation (PACB), Sri Lanka, for their exemplary vigilance, professionalism, and integrity in preventing a $20 million fraudulent transaction during the 2016 Bangladesh Bank …

The OpenJS Foundation has updated Node.js 24.x, 22.x, and 20.x to fix two serious vulnerabilities—CVE-2025-27210 and CVE-2025-27209—that could endanger Windows applications and web services using JavaScript’s V8 engine. These issues, involving path traversal bypass and hash collision denial-of-service (HashDoS), impact millions of backend and full-stack applications globally. CVE-2025-27210: Path Traversal …

Broadcom has urgently alerted about four serious vulnerabilities in VMware ESXi, Workstation, Fusion, and Tools, with CVSS scores up to 9.3. Reported by leading security researchers at Pwn2Own, these flaws present major risks to organizations using virtual infrastructure. CVE-2025-41236 – Integer Overflow in VMXNET3 (CVSS 9.3) A vulnerability in the …