InfoSecBulletin Cybersecurity for mankind

The Cybersecurity and Infrastructure Security Agency (CISA) has made an urgent warning about a serious security flaw in Fortinet products. On April 13, 2026, the agency put a severe SQL injection threat into its Known Exploited Vulnerabilities (KEV) list. This shows that attackers are using the flaw in real situations. …

Crooks are taking advantage of four Microsoft flaws – one fixed 14 years ago and another linked to ransomware – as reported by the top U.S. cyber defense agency, which on Monday told federal agencies they have two weeks to fix them. The four security issues added to CISA’s Known …

A global smishing scam dubbed “Error524” is hitting many countries, including Bangladesh. BGD e-Gov CIRT said,  this scam uses Phishing-as-a-Service (PhaaS) tools to send SMS messages with harmful links. These links redirect victims to highly convincing phishing websites designed to steal: Personal information Banking credentials Payment card data This campaign …