Saturday , June 7 2025

Feature

News In Picture

Cyber Attack

Alert

Grid

Recent Posts

11 state hackers exploit new Windows zero-day since 2017

Wednesday , March 19 2025 0

Windows

11 nation-state groups from North Korea, China, and Russia are exploiting a vulnerability in a common feature of Microsoft Windows. Researchers at the Zero Day Initiative (ZDI) have found several campaigns exploiting the bug in Windows shortcut (.lnk) files, dating back to 2017. Microsoft hasn’t assigned a CVE number, but …

Read More »

Hackers Exploit ChatGPT with CVE-2024-27564

Tuesday , March 18 2025 0

ChatGPT

Attackers are actively targeting OpenAI, exploiting CVE-2024-27564, a Server-Side Request Forgery (SSRF) vulnerability in OpenAI’s ChatGPT infrastructure. Veriti’s latest research reveals that this vulnerability, despite being classified as medium severity, has already been weaponized in real world attacks. Research uncovers: Active exploitation in the wild, with over 10,479 attack attempts …

Read More »

(CVE-2024-540385)
CVSS 10 Alert! HPE Cray Vulnerability Authentication Bypass Threat

Tuesday , March 18 2025 0

HPE

A critical vulnerability, CVE-2024-540385, has been found in HPE Cray XD670 servers using the AMI BMC Redfish API, allowing remote authentication bypass. Administrators must act quickly to prevent the exploitation. According to HPE’s security bulletin, “This vulnerability could be remotely exploited to allow authentication bypass.” An attacker could gain unauthorized …

Read More »
Mail: [email protected]
© Copyright 2025, All Rights Reserved InfoSecBulletin