InfoSecBulletin Cybersecurity for mankind

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and widespread today’s threats are. Daily Security Update is a short, regular report that keeps people and organizations updated on the latest in cybersecurity. It shares timely information on new threats, …

A new security flaw affecting NGINX Plus and NGINX Open is being used by hackers days after it was made public, according to VulnCheck. The flaw, known as CVE-2026-42945 (CVSS score: 9.2), is a heap buffer overflow in the ngx_http_rewrite_module that affects NGINX versions 0.6.27 to 1.30.0. An AI security …

BGD e-GOV CIRT found a cyber-attack campaign using AsyncRAT (Asynchronous Remote Access Trojan) aimed at Bangladesh. Threat analysis shows that the website ck44jili[.]com is a main Control Center (C2) for the AsyncRAT malware. The campaign mixes malware, remote access, and fake financial tricks. Attackers hide harmful files as real software …