InfoSecBulletin Cybersecurity for mankind

Shadowserver has found more than 14,000 BIG-IP APM instances visible on the internet during ongoing attacks that use a remote code execution (RCE) weakness. BIG-IP APM is F5’s centralized access management proxy solution designed to help admins secure access to their organizations’ networks, cloud, applications, and application programming interfaces (APIs). This …

ShinyHunters claim to compromise over 3 million Salesforce records with personal data, GitHub files, AWS storage, and other compromised company information. On March 31st, ShinyHunters posted extortion demands targeting Cisco Systems. The hackers are threatening the company with “several annoying (digital) problems,” unless their demands are met by April 3rd. “A …

There has been a sharp rise in malware linked to the Nymaim / Avalanche loader in Bangladesh. CIRT BD observed over 27,000 malware events, which means bad actors are trying to infect systems and there is ongoing contact with the botnet. Threat Overview Nymaim (also known as Gozi ISFB Loader) …