InfoSecBulletin Cybersecurity for mankind

A previously undocumented backdoor called PATCHCORD actively target telecom and critical information infrastructure (CII) in South Asia. According to Acronis Threat Research Unit (TRU), the backdoor is a C/C++ code that gets into systems using specific tricks, like fake VPN installers pretending to be Afghan Telecom (AFTEL) and telecom management …

Fortinet has released fixes for a set of authentication flaws in its FortiWeb, FortiManager, and FortiClient products. It warns admins to update quickly because these systems are sensitive. The severe one, known as CVE-2026-26035, is found in FortiWeb’s login system. It has a CVSS score between 8.8 and 9.8 based …

A data theft plan is stealing information from anonymous users on Salesforce Experience Cloud and ServiceNow customer portals using special tools. The data theft campaign, called City-Forum by the software security company Reco, comes from one server that has attacked many groups around the world. These groups include phone companies, banks, …