InfoSecBulletin Cybersecurity for mankind

The “CISO Best Practices Cheat Sheet” is a concise, high-level guide designed to help Chief Information Security Officers (CISOs) and senior security leaders manage and mature their organization’s information security strategy. It’s typically created by cybersecurity vendors (like Wiz, Palo Alto Networks, or SANS Institute) as a strategic reference sheet—something …

Mysterious Elephant is an active APT group identified by Kaspersky GReAT in 2023. It continually evolves its tactics to avoid detection. The group’s recent campaign, starting in early 2025, shows a notable change in their tactics, focusing more on new custom tools and open-source tools like BabShell and MemLoader. The …

At Pwn2Own Ireland 2025, researchers Ben R. and Georgi G. from Interrupt Labs demonstrated their success in exploiting a zero-day vulnerability in the Samsung Galaxy S25. They gained complete control of the device, allowing them to activate the camera and track the user’s location. The exploit, revealed on the event’s final …