December, 2024

• 30 December

  Look back; The Worst Hacks of 2024

  

  In 2024, digital security experienced major breaches as cybercriminals and state-backed groups exploited vulnerabilities for large-scale attacks. These incidents were efficient for attackers but damaging to affected organizations and individuals, threatening their privacy and security. With rising global tensions, 2025 is anticipated to present more cybersecurity challenges. Infosecbulletin highlights the …

  Read More »
• 29 December

  HIPAA to be updated with new cybersecurity regulations, White House

  

  Proposed new cybersecurity rules for healthcare institutions will focus on how they protect user data under HIPAA, as stated by a White House official. Anne Neuberger, deputy national security adviser for cyber and emerging technology, told “The security rule [under HIPAA] was first published in 2003 and it was last …

  Read More »
• 29 December

  New NGate Trojan Drains Bank Accounts via ATMs

  

  Malware analysts at Doctor Web have identified new versions of the NGate banking trojan. This malware steals data from the device’s NFC chip, enabling attackers to withdraw money from victims’ accounts at ATMs without their knowledge. The NGate banker was first noticed by antivirus vendors in autumn 2023 due to …

  Read More »
• 28 December

  CPE Seminar Held at ISACA Dhaka Chapter Office Premises

  

  ISACA Dhaka chapter arranged a Continuing Professional Education (CPE) seminar for the community as its calendar work to develop the professionals. On 28 December, Saturday at ISACA Dhaka office with the participation over 50 participants the seminar draw the attention with the two leading topic on “Leadership & Communication is …

  Read More »
• 27 December

  Update Immediately
  Palo Alto Releases Patch for PAN-OS DoS Flaw

  

  Palo Alto Networks has revealed a high severity vulnerability in PAN-OS software that may lead to a denial-of-service (DoS) issue on affected devices. The vulnerability CVE-2024-3393 (CVSS score: 8.7) affects PAN-OS versions 10.X and 11.X, and Prisma Access with PAN-OS versions 10.2.8 or later and before 11.2.3. It has been …

  Read More »
• 27 December

  Cyberattack Hit Japan Airlines Systems, delaying flights

  

  Japan Airlines reported a cyberattack on Thursday that delayed over 20 domestic flights. The airline managed to stop the attack and restore its systems within hours, and confirmed that flight safety was not affected. JAL reported that a network issue began Thursday morning, affecting both internal and external systems. The …

  Read More »
• 26 December

  Hacker reportedly leak Indonesia Gov.t 82 GB data

  

  Hackers claimed to have accessed and stolen 82 GB of sensitive data from Indonesia’s Regional Financial Management Information System (SIPKD). GBHackers News reported the data breach announced on a hacking forum, exposing sensitive financial, administrative, and personal information, raising significant security and privacy concerns. The stolen data, which includes backups …

  Read More »
• 25 December

  BCSI officially announce National Vulnerability Disclosure Program (NVDP)

  

  Bangladesh Cyber Security Intelligence (BCSI) officially launch the National Vulnerability Disclosure Program (NVDP) to enhance the country’s cybersecurity. This initiative aims to create a secure platform for ethical hackers, researchers, and organizations to work together in identifying and addressing vulnerabilities that threaten government systems, critical infrastructure, and private sector entities. …

  Read More »
• 25 December

  CVE-2024-9474
  Researcher unveil sophisticated backdoor in Palo Alto Networks firewalls

  

  Northwave Cyber Security has found a sophisticated backdoor, LITTLELAMB.WOOLTEA, targeting Palo Alto Networks firewalls. Northwave researcher claimed the backdoor was found during a forensic investigation of a compromised Palo Alto Networks device. Attackers exploited a recently disclosed vulnerability (CVE-2024-9474) to enter the system and deploy a malicious script called bwmupdate, …

  Read More »
• 24 December

  New G-Door Vul Allow Hackers Bypass Microsoft 365 Security With Google Docs

  

  A newly discovered vulnerability called “G-Door” enables malicious actors to bypass Microsoft 365 security by exploiting unmanaged Google Docs accounts. This flaw poses a serious threat to organizations using Microsoft 365’s Conditional Access policies. The G-Door vulnerability stems from the ability to create personal or workspace Google accounts using a …

  Read More »