InfoSecBulletin Cybersecurity for mankind

In its November 2024 security update, Google fixed 40 vulnerabilities in Android, including two that are actively exploited: CVE-2024-43047 and CVE-2024-43093. Google’s announcement gives minimal information about the exploitation, stating only that “there are indications that the following may be under limited, targeted exploitation.” CVE-2024-43047 is a critical vulnerability (CVSS …

GitHub has launched an AI tool called ‘Spark’ that allows users to create apps using natural language, eliminating the need for coding. This tool was introduced at the GitHub Universe Conference in San Francisco. This tool, created by GitHub Next Labs, can quickly generate a web app from English prompts. …

“A threat actor has reportedly claimed to gain root-level access to Titas Gas’s firewall server and is actively offering this access for sale on the dark web, posing a serious risk to Bangladesh’s energy infrastructure”. Bangladesh Cyber Security Intelligence (BCSI) reported that someone has reportedly gained unrestricted access to Titas …