InfoSecBulletin Cybersecurity for mankind
The US Department of Health and Human Services (HHS) has reported that threat actors have accessed sensitive health data of tens of millions of American patients this year. The HHS reported a significant increase in “large breaches” and ransomware incidents to its Office for Civil Rights (OCR). In 2023, there …
Read More »TimeLine Layout
November, 2023
-
4 November
CTF challenge
“Bonk police” secure first place CTFBD at MIST
Capture the flag CTF-2023 and Cyber Security Conference was held at MIST in the presence of around 150 participants from 29 teams. The event started on Saturday (November 4) morning ended with the prize distribution in the afternoon. “Bonk Police” took first place in the CTF competition securing 2425 points. …
Read More » -
4 November
Bangladesh Army presents
CTF BD and cyber security conferences continues at MIST
Today (04 November) Saturday a day long “Flag Hunt-2023” and “cyber security conference” is being held at MIST powered by the IT Directorate, Bangladesh Army. 29 teams from different places across the country are competing among others to secure the first place till 3 PM. After the CTF, there are …
Read More » -
3 November
Daily Cybersecurity update, November 03
*About 5,000 Okta employees had their data accessed during a third-party data breach on October 12. The breach involved stolen information, including names, Social Security numbers, and medical insurance details of both current and former employees. *The AP News website was down because of a DDoS attack. Only some pages …
Read More » -
3 November
ZDI published the vulnarabilities
New Microsoft Exchange zero-days allow RCE, data theft attacks
Trend Micro’s Zero Day Initiative (ZDI) Thursday (02.11.23) published four zero days vulnerabilities of Microsoft Exchange which can exploit remotely to execute arbitrary code or disclose sensitive information on affected installations. Bleeping Computer reported, these vulnerabilities were reported to Microsoft on September 7th and 8th, 2023. Microsoft acknowledges the reports …
Read More » -
3 November
Data breach cause prediction
90% of data breaches in 2024 will feature a human element
According to an analyst, there will be major data breaches and fines for application developers who use generative AI (GenAI) extensively next year. Forrester made the claims in its 2024 predictions for cybersecurity, risk and privacy and trust. Alla Valente, a senior analyst, issued a warning about the excessive use …
Read More » -
2 November
FIRST CVSS 4.0
FIRST releases new vulnerability scoring system CVSS 4.0
The Forum of Incident Response and Security Teams (FIRST) has recently announced the release of CVSS v4.0, the latest version of the Common Vulnerability Scoring System (CVSS) standard. This update comes more than eight years after the release of CVSS v3.0 in June 2015. Version 4.0 of CVSS aims to …
Read More » -
1 November
International Counter-Ransomware Initiative
40 countries to sign a agreement not to pay ransom
40 countries will sign a pledge to stop paying ransoms demanded by cybercriminal groups at the International Counter-Ransomware Initiative summit in Washington, D.C. Anne Neuberger, Deputy National Security Adviser for Cyber and Emerging Technology at the White House, suggested that this initiative is a response to the increasing global threat …
Read More » -
1 November
Corvus threat intel report
Ransomware Attacks Up More Than 95% Over 2022
In its Q2 2023 Global Ransomware Report, Corvus noted a significant resurgence in global ransomware attacks, which has continued through the third quarter. Now, with two months remaining in the year, the number of ransomware victims in 2023 has already surpassed what was observed for 2021 and 2022. If the …
Read More »
October, 2023
-
31 October
For security issue
Canada bans Kaspersky Apps and Wechat On Government Devices
The President of the Canadian treasury board, Anita Anand, announced yesterday (30 October) a ban on the use of the WeChat and Kaspersky suite of applications on government-issued mobile devices. The press release stated, the Government of Canada is committed to keeping government information and networks secure. We regularly monitor …
Read More »