C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 2

Renier van Heerden

2023-01-13 10:48

Hacking
- Vulnerability with 9.8 severity in Control Web Panel is under active exploit [Dan Goodin, Arstechnica]
- A government watchdog spent Dollars 15,000 to crack a federal agency’s passwords in minutes [Zack Whittaker, Tech Crunch]
- Here’s how to remotely take over a Ferrari…account, that is [Jessica Lyons Hardcastle, The Register]
- Hackers hit websites of Danish central bank, other banks [Jacob Gronholt-Pedersen and Nikolaj Skydsgaard, Reuters]
- New SHC-compiled Linux malware installs cryptominers, DDoS bots [Bill Toulas, Bleeping Computer]
- Slack’s private GitHub code repositories stolen over holidays [Ax Sharma, Bleeping Computer]
Randsomeware
- Hackers stole data of 460,000 individuals in MFHS ransomware attack [Carly Page, Tech Crunch]
- Rackspace says hackers accessed customer data during ransomware attack [Carly Page, Tech Crunch]
Patches
- Microsoft ends Windows 7 security updates [Zack Whittaker, Tech Crunch]
- Microsoft fixes Windows database connections it broke in November [Jeff Burt, The Register]
- Cisco warns of auth bypass bug with public exploit in EoL routers [Sergiu Gatlan, Bleeping Computer]
Odds
- A corrupt file led to the FAA ground stoppage. It was also found in the backup system [Gregory Wallace and Pete Muntean,, CNN]
- Homeland Security, CISA builds AI-based cybersecurity analytics sandbox [Jeff Burt, The Register]
- GitHub makes it easier to scan your code for vulnerabilities [Sergiu Gatlan, Bleeping Computer]

Infosec bits for week 50/22

Heloise Meyer

2022-12-15 12:16

Hacking News:
- Details of 77,000 Uber employees exposed in hack — Report [Bloomberg, MyBroadband]
- By the way, the Reserve Bank was hacked [Bloomberg, BusinessTech]
- The FBI’s Cybersecurity Program for Critical Infrastructure Was Hacked [Lucas Ropek, Gizmodo]
- Cycling South Africa suspends Zwift racer caught hacking data during world championships qualifier [Dan Alexander, Road.cc]
- Elite Hackers Made Almost $1 Million Last Week, Here’s How [Davey Winder, Forbes]
Vulnerabilities:
- New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products [Ravie Lakshmanan, The Hacker News]
- Fortinet confirms VPN vulnerability exploited in the wild [Arielle Waldman, TechTarget]
- Microsoft December 2022 Patch Tuesday fixes 2 zero-days, 49 flaws [Lawrence Abrams, BleepingComputer]
Malware:
- New Python malware backdoors VMware ESXi servers for remote access [Bill Toulas, BleepingComputer]
- Effective, fast, and unrecoverable: Wiper malware is popping up everywhere [Dan Goodin, Ars Technica]
- New GoTrim Botnet Attempting to Break into WordPress Sites’ Admin Accounts [Ravie Lakshmanan, The Hacker News]
- Clop ransomware uses TrueBot malware for access to networks [Bill Toulas, BleepingComputer]

Infosec bits for week 49/22

Renier van Heerden

2022-12-09 15:32

Hacking
- Cyberattack on top Indian hospital highlights security risk [Aniruddha Ghosal, AP News]
- Samsung Galaxy S22 hacked again on second day of Pwn2Own [Sergiu Gatlan, Bleeping Computer]
- Samsung’s Android app-signing key has leaked, is being used to sign malware [Ron Amadeo, Arstechnica]
- Hacked corporate email accounts used to send MSP remote access tool [Ionut Ilascu, Bleeping Computer]
Cyber Policies
- FBI Calls End-to-End Encryption Deeply Concerning’ as Privacy Groups Hail Apple’s Advanced Data Protection as a Victory for Users [Sami Fathi, Mac Rumors]
- U.S. to spend $1.5 billion to jumpstart alternatives to Huawei [Ina Fried, Axios]
- Governments seek ways to avert quantum’s encryption apocalypse [Sam Sabin, Axios]
Odd News
- Scammers Are Scamming Other Scammers Out of Millions of Dollars [Matt Burgess, Wired]
- Syntax errors are the doom of us all, including botnet authors [Kevin Purdy, Arstechnica]
- Automated dark web markets sell corporate email accounts for 2 dollars [Bill Toulas, Bleeping Computer]
- Here’s Why You Want To Stay Away From Eufy Security Cameras [Rahul Srinivas, SlashGear].

Infosec bits for week 48/22

Sicelo Ncekana

2022-12-02 17:51

Security News
- Postbank loses over R18-million to cybercrime attacks in three months [Marecia Damons, Algoa FM]
- Samsung, LG, Mediatek certificates compromised to sign Android malware [Nitzan Yaakov, Aqua Blog]
- Web browsers drop mysterious company with ties to U.S. military contractor [Joseph Menn, The Washington Post]
- LastPass Suffers Another Security Breach; Exposed Some Customers Information [Ravie Lakshmanan, The Hacker News]
Phishing and Malware
- Vanuatu officials turn to phone books and typewriters, one month after cyber attack [Christopher Cottrell, Tech Guardian]
- Ransomware group may have stolen customer bank details from British water company [Alexander Martin, The Record]
- Samsung, LG, Mediatek certificates compromised to sign Android malware [Sergiu Gatlan, Bleeping Computer]
- Android malware infected 300,000 devices to steal Facebook accounts [Gandalf_The_Grey, Malware Tips]
- New DuckLogs malware service claims having thousands of ‘customers’ [Bill Toulas, Bleeping Computer]
Vulnerabilities & Patches
- CISA Warns of Multiple Critical Vulnerabilities Affecting Mitsubishi Electric PLCs [Ravie Lakshmanan, The Hacker News]
- Tailscale VPN nodes vulnerable to DNS rebinding, RCE [Ben Dickson, The Daily Swing]
- Secret Network resolves network vulnerability following white hat disclosure [ZHIYUAN SUN, Cointelegraph]
- Researchers Detail AppSync Cross-Tenant Vulnerability in Amazon Web Services [Ravie Lakshmanan, The Hacker News]
- Remote Code Execution Vulnerability Found in Windows Internet Key Exchange [Alessandro Mascellino, Info Security]