June, 2023

• 27 June

  Daily Cybersecurity Update, June 27, 2023

  

  Local government bodies across the U.S. are facing the wrath of growing cyber intrusions. The latest such victim is a Texan city that suffered a data breach affecting half a million government files. Meanwhile, the Cl0p ransomware continued to claim more victims of MOVEit Transfer zero-day exploitation, this time including …

  Read More »
• 27 June

  Two big energy giant hit by cyber attack, who are in list next?

  

  Petro-Canada gas stations, following a cyberattack on parent company Suncor: Suncor is a Canada-based energy company that owns a network of more than 1,800 Petro-Canada retail and wholesale locations. On June 25, Suncor said it had experienced a cybersecurity incident that may impact some transactions with suppliers and customers. The …

  Read More »
• 27 June

  Who apply for the license of Digital Bank in Bangladesh?

  

  Bangladesh Bank has taken the initiative to establish Digital Bank with the aim of providing global information technology-based digital banking services to the people for the purpose of building a ‘Smart Bangladesh’ declared by the Government of Bangladesh. In this context, Bangladesh Bank has approved the ‘Guidelines for setting up …

  Read More »
• 27 June

  Fortinet Patches Critical RCE Vulnerability in FortiNAC

  

  Fortinet has released patches to address a critical vulnerability in its FortiNAC network access control solution. The vulnerability, tracked as CVE-2023-33299, is a deserialization of untrusted data issue that could allow an unauthenticated attacker to execute unauthorized code or commands on affected devices. The vulnerability impacts FortiNAC versions up to …

  Read More »
• 27 June

  Google chrome patched 4 high vulnerabilities

  

  Google has released a security update for Chrome that patches four high-severity vulnerabilities. The update is available for Mac, Linux, and Windows, and it will be rolled out over the next few days/weeks. The vulnerabilities were discovered by three outside researchers, and they could have been exploited by attackers to …

  Read More »
• 26 June

  CERT ISSUE SITUATIONAL ALERT ON CYBER THREATS

  

  In the advent of Eid ul-Adha holidays, Bangladesh Government’s Computer Incident Response Team (BGD e-GOV CIRT) would like to ensure the security of the critical information infrastructures (CII), banks and financial institutions, health care and all sorts of government and private organizations by sharing a list of top threats to …

  Read More »
• 25 June

  Again! Two big airlines disclosed data breaches

  

  American Airlines and Southwest Airlines, two of the largest airlines in the world, disclosed on Friday that their data had been breached. The breach was caused by a hack of Pilot Credentials, a third-party vendor that manages pilot applications and recruitment portals for multiple airlines. The breach affected 5745 pilots …

  Read More »
• 25 June

  Twitter Hacker Sentenced to 5 Years in Prison for $120,000 Crypto Scam

  

  Joseph James O’Connor, a 24-year-old British citizen, was sentenced to five years in prison in the United States for his role in the July 2020 Twitter hack. O’Connor, who went by the online alias “PlugwalkJoe,” pleaded guilty to criminal schemes that included unauthorized access to Twitter’s backend tools, SIM swapping …

  Read More »
• 24 June

  CISA orders to patch iPhone bugs abused in spyware attacks

  

  Today, CISA ordered federal agencies to patch recently patched security vulnerabilities exploited as zero-days to deploy Triangulation spyware on iPhones via iMessage zero-click exploits. The warning comes after Kaspersky published a report detailing a Triangulation malware component used in a campaign it tracks as “Operation Triangulation.” Kaspersky says it found …

  Read More »
• 24 June

  Daily Cybersecurity Update, June-23, 2023

  

  An unsecured database belonging to RateForce ended up exposing 93.93 GB of personal information of users. This is a reminder to secure your cloud buckets. We also have two more victims of the MOVEit ransomware attack. This time, it is the largest public pension fund in the U.S. and an insurance …

  Read More »