InfoSecBulletin Cybersecurity for mankind

Researchers monitoring for larger .ICS calendar attachments found that a flaw in Zimbra Collaboration Suite (ZCS) was used in zero-day attacks at the beginning of the year. ICS files, or iCalendar files, store plain text calendar information, like meetings and events, and allow exchange between different calendar apps. Threat actors …

The Trinity of Chaos, a ransomware group linked to Lapsus$, Scattered Spider, and ShinyHunters, has created a Data Leak Site on the TOR network. This site includes data from 39 companies, such as Aeromexico, AirFrance, Google, Cisco, Stellantis, and Qantas Airlines, affected by attacks on weak Salesforce instances and other …

On October 3, 2025, GreyNoise noted a 500% increase in scans aimed at Palo Alto Networks login portals, the highest activity level in three months. Researchers found that more than 1,285 IPs scanned Palo Alto portals, an increase from the typical 200. They noted that 93% of these IPs were …