InfoSecBulletin Cybersecurity for mankind
A SAML token signature bypass vulnerability in VMware Tools was responsibly reported to VMware with a maximum CVSSv3 base score of 7.5. Updates are available to remediate this vulnerability in the affected VMware products.
CISA Adds 3 Ivanti Endpoint Manager Bugs to KEV
By infosecbulletin
/ Tuesday , March 11 2025
CISA included three vulnerabilities in Ivanti Endpoint Manager—CVE-2024-13159, CVE-2024-13160, and CVE-2024-13161—in its Known Exploited Vulnerabilities catalog. Federal agencies must address...
Read More
Ransomware Attacks Set Records in February: New Data Shows
By infosecbulletin
/ Sunday , March 9 2025
Ransomware attacks reached a record high in February, surpassing previous months, according to a Cyble report. The Cyble report tracked...
Read More
Cyber attack at Japanese telecom leader NTT hits 18,000 companies
By infosecbulletin
/ Saturday , March 8 2025
NTT Communications Corporation discovered illegal access to its facilities on February 5 and confirmed on February 6 that some information...
Read More
Cyber heist: Pune losses Rs 6007 crore in cyber scam
By infosecbulletin
/ Friday , March 7 2025
India's Maharashtra Deputy Chief Minister Devendra Fadnavis disclosed alarming cyber fraud figures for Pune in 2024 during the Assembly session....
Read More
Nearly 1 million airport lost and found records leaked
By infosecbulletin
/ Friday , March 7 2025
Cybersecurity researcher Jeremiah Fowler found that over a dozen unprotected databases from the German firm Lost and Found Software exposed...
Read More
Exploiting CVE-2024-4577, Attackers Target Japan with Cobalt Strike
By infosecbulletin
/ Friday , March 7 2025
Cisco Talos found that an unknown attacker has been targeting organizations in Japan since January 2025. The attacker exploited the...
Read More
Sleeping Beauty
Researchers Bypassed CrowdStrike Falcon Sensor partially
By infosecbulletin
/ Friday , March 7 2025
SEC Consult researchers found a vulnerability in CrowdStrike's Falcon Sensor, enabling attackers to evade detection and run malicious applications. The...
Read More
CVE-2025-22224
41,500+ VMware ESXi Instances Vulnerable to Attacks
By infosecbulletin
/ Thursday , March 6 2025
As of March 4, 2025, Shadowserver found that over 41,500 internet-exposed VMware ESXi hypervisors are vulnerable to the actively exploited...
Read More
Register Now
AI Engineering Hackathon: Registration Open
By infosecbulletin
/ Wednesday , March 5 2025
On April 19, 2025 (Saturday), Brain Station 23 and Poridhi are jointly going to organize "AI ENGINEERING HACKATHON". The prize...
Read More
Cisco alerts about a Webex flaw that exposes credentials
By infosecbulletin
/ Wednesday , March 5 2025
Cisco has alerted customers about a vulnerability in Webex for BroadWorks that could allow unauthorized attackers to access credentials remotely....
Read More
Click here to read full report.
