InfoSecBulletin Cybersecurity for mankind

Researchers at cybersecurity firm SafeBreach created a new method called Pool Party. This method allows attackers to bypass EDR solutions. The researchers presented Pool Party at Black Hat Europe 2023. The experts discovered an new way to inject processes by using Windows thread pools. Researchers found eight new process injection …

The Apache Software Foundation fixed a critical file upload vulnerability in the Struts 2 open-source framework. This flaw, tracked as CVE-2023-50164, could allow remote code execution. An attacker can manipulate file upload parameters to upload a malicious file and execute code on the server. “An attacker can manipulate file upload …

17th bdNOG Conference and Workshop is going to be held in Dhaka on December 12-15 jointly organized by Bangladesh Network Operators Group (BDING) and Internet Service Providers Association of Bangladesh (ISPAB). Three days technical workshop and one day hosting day will be in the conference. The workshop will train Internet …