InfoSecBulletin Cybersecurity for mankind

GitLab has released a critical security update for several versions of its platform, including versions 17.6.2, 17.5.4, and 17.4.6 for both Community and Enterprise Editions. This update fixes vulnerabilities that could result in account takeovers, denial of service attacks, and data leaks. CVE-2024-11274 (CVSS 8.7) is a critical vulnerability that …

Oasis Security discovered a flaw in Microsoft’s Multi-Factor Authentication (MFA) system, allowing attackers to bypass it and access user accounts, including Outlook, OneDrive, Teams, and Azure. With over 400 million Office 365 users, the impact of this vulnerability could be significant. Research team claim, “The bypass was simple: it took …

Dr. Md. Yunus, the chief advisor to the interim government of Bangladesh, is the victim of propaganda using artificial intelligence. A Deepfakes video of him has been seen on social media for the past few days where he is heard saying on the gambling site, “I have decided to create …