VMware Tools contains a SAML Token Signature Bypass Vulnerability

infosecbulletin Friday , September 1 2023 International, Vulnerabilities

A SAML token signature bypass vulnerability in VMware Tools was responsibly reported to VMware with a maximum CVSSv3 base score of 7.5. Updates are available to remediate this vulnerability in the affected VMware products.

Five new malware families actively targeting Asian Gov.t infra

By infosecbulletin / Friday , August 21 2026

Central Asian government agencies have been attacked in a cyber spy operation that used a small but different range of...

Five new malware families actively targeting Asian Gov.t infra

T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network

By infosecbulletin / Friday , August 21 2026

T-Mobile’s cybersecurity team reportedly physically cut a network cable connecting compromised infrastructure to the outside world. According to Bloomberg, the move...

T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network

Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution

By infosecbulletin / Friday , August 21 2026

Splunk has issued security fixes for 17 weaknesses in different apps and add-ons, such as Splunk MCP Server, Splunk AI...

Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution

“Zombie Card” attack revels expired Visa card may be used for contactless payments

By infosecbulletin / Friday , August 21 2026

Security experts have shown that expired credit cards can still be used. A study from the University of Massachusetts Amherst,...

“Zombie Card” attack revels expired Visa card may be used for contactless payments

Critical Zimbra RCE Flaw Actively Exploited in the Wild

By infosecbulletin / Thursday , August 20 2026

CERT Polska has alerted that bad actors are actively exploiting a security flaw in Zimbra Collaboration Suite to execute code...

Critical Zimbra RCE Flaw Actively Exploited in the Wild

Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide

By infosecbulletin / Thursday , August 20 2026

Operation CameraSwarm compromised 14,500+ Dahua IP cameras mostly in Ukraine and Russia. The operation lasted for at least 35 days...

Operation CameraSwarm A single hacker compromise 1400+ Dahua camera worldwide

Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign

By infosecbulletin / Thursday , August 20 2026

The Cl0p ransomware group has listed over 40 organizations that they say they targeted in a recent attack. This attack...

Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign

Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw

By infosecbulletin / Thursday , August 20 2026

Oracle has put out 943 new security updates in its August 2026 Critical Security Patch Update. These updates fix problems...

Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw

500+ critical infrastructure hit by Medusa ransomware

By infosecbulletin / Wednesday , August 19 2026

Medusa ransomware hit over 500 critical infrastructure. The Cybersecurity and Infrastructure Security Agency (CISA) said on Tuesday that the Medusa...