InfoSecBulletin Cybersecurity for mankind

ASUS released a new firmware update to fix a vulnerability affecting seven router models, which could be exploited by remote attackers to log in to the devices. The vulnerability CVE-2024-3080 (CVSS v3.1 score: 9.8 “critical”) is an authentication bypass flaw. It enables remote attackers without authentication to control the device. …

AWS announced new security features at its re:Inforce conference, such as identity and malware protection services. The cloud giant added passkeys to the list of supported multi-factor authentication (MFA) mechanisms for root and Identity and Access Management (IAM) users. The company also started enforcing MFA on root users, particularly AWS …

A smartphone’s IMEI (which stands for International Mobile Equipment Identity) is a unique identifier for each device, similar to a digital fingerprint. Telecom companies use it to enable network connectivity on a SIM card. Additionally, the IMEI number is used to track lost devices or criminals. However, analysis revealed that …