InfoSecBulletin Cybersecurity for mankind
There are many happenings in the cyber world in the past week including Data Breaches, Vulnerability, Cyber Attack and many more.
Vulnerabilities:
Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform
Hackers Bypass Gmail MFA With App-Specific Password Reuse
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems
Paraguay 7.4 Million Citizen Records Leaked on Dark Web
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
Critical OpenVPN Vulnerabilities
Microsoft Office Spoofing Vulnerability
Open Source Firewall pfsense vulnerability
Series Of Solar Power System Vulnerabilities
Critical XSS Vulnerability
Microsoft Copilot Exploitation
MongoDB Vulnerability
Confusion Attacks in Apache HTTP Server
0-click RCE Flaw Impacting Windows Server
Cisco Software Manager Password Change Vulnerability
Cisco Small Business IP Phones Vulnerabilities
Cyber Attacks:
Thousands Of Internet-Connected ICS Devices Exposes Critical Infrastructure
Evolution of Cybercriminal Underworld
STAC6451 Hackers Attacking Microsoft SQL Servers
Cmoon Worm
Massive DDoS Attack
Hackers Leveraging OneDrive & Google Drive
Critical Kibana Vulnerability
Threats:
Threat Actors Hijacking Websites
New Double-Extortion Ransomware
Android Malware Using Innovative Smali Gadget Injection
New Botnet Attacking ASUS Routers
MacOS Stealer Mimic as Screen Recorder
Fake WinRar Websites
Data Breach:
ADT Data Breach
National Public Data Hacked
