InfoSecBulletin Cybersecurity for mankind

Proof of concept exploits for a serious SQLi vulnerability in Fortinet FortiWeb have been released, allowing pre-authenticated remote code execution on vulnerable servers. FortiWeb is a web application firewall (WAF) that protects web applications from harmful HTTP traffic and threats. The FortiWeb vulnerability, rated 9.8/10 in severity, is identified as …

Kaspersky’s research says that in 2024, 33.3 million cyber attacks were launched worldwide against mobile devices. The aim of these attacks is to steal important information of a person, including banks, and blackmail them. Grameenphone has launched a new service called ‘GPShield’ in the beta version in the country to …

AMD has revealed four new vulnerabilities that could enable attackers to access sensitive data via timing-based side-channel attacks. These vulnerabilities, called AMD-SB-7029 or Transient Scheduler Attacks, impact various AMD processors, including EPYC chips for data centers and Ryzen processors for enterprises. The recent disclosure has ignited a debate over threat …