C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 10

Heloise Meyer

2023-03-10 13:23

Cybersecurity News:
- Where are the women in cyber security? On the dark side, study suggests [Brandon Vigliarolo, The Register]
- GitHub makes 2FA mandatory next week for active developers [Sergiu Gatlan, BleepingComputer]
- Darktrace warns of rise in AI-enhanced scams since ChatGPT release [Mark Sweney, The Guardian]
- ChatGPT Integrated Into Cybersecurity Products as Industry Tests Its Capabilities [Eduard Kovacs, SecurityWeek]
- DuckDuckGo launches AI-powered search query answering tool [Bill Toulas, BleepingComputer]
- Defeating the Deepfake Danger [Derek Manky, SecurityWeek]
Malware:
- BlackMamba: Using AI to Generate Polymorphic Malware [Jeff Sims, Security Boulevard]
- Sys01 Stealer’ Malware Targeting Government Employees [Ionut Arghire, SecurityWeek]
- Sneaky malware BlackLotus can bypass important Windows boot functions [Joe Warminsky, The Record]
- Custom Chinese Malware Found on SonicWall Appliance [Eduard Kovacs, SecurityWeek]
- IceFire ransomware now encrypts both Linux and Windows systems [Sergiu Gatlan, BleepingComputer]
Vulnerabilities:
- New Critical Flaw in FortiOS and FortiProxy Could Give Hackers Remote Access [Ravie Lakshmanan, The Hacker News]
- Vulnerability Exposes Cisco Enterprise Routers to Disruptive Attacks [Ionut Arghire, SecurityWeek]
Hacks:
- LastPass Hack: Engineer’s Failure to Update Plex Software Led to Massive Data Breach [Ravie Lakshmanan, The Hacker News]
- Acer confirms breach after 160GB of data for sale on hacking forum [Bill Toulas, BleepingComputer]
- AT&T Vendor Breach Exposes Data on 9M Wireless Accounts [DarkReading, DarkReading]

Infosec bits for 2023 week 9

Maajied Moos

2023-03-03 14:59

Malware
- Fake Amazon Prime email abuses LinkedIn’s URL shortener [Christopher Boyd, Malwarebytes Labs]
- Royal Ransomware Targets Linux ESXi Servers [Geri Revay, Fortinet]
- Beware rogue 2FA apps in App Store and Google Play – don’t get hacked! [Paul Ducklin, Naked Security]
- How Cambodia-based scammers made an estimated $3 million in ‘pig butchering’ scheme [Daryna Antoniuk, The Record]
Hacks
- News Corp says hackers first breached its systems between Feb 2020 and Jan 2022 [Pierluigi Paganini, SecurityAffairs]
- Dish Network goes offline after likely cyberattack, employees cut off [Ax Sharma, BleepingComputer.com logo]
- Hacker leaks alleged Activision employee data on cybercrime forum [Bill Toulas, BleepingComputer.com logo]
- Video Marketing Software Animker Leaking Trove of User Data [WAQAS, HackRead]
Information
- Crime Blotter: Hackers Fail to Honor Promises to Delete Data [Mathew J. Schwartz, Bank Info Security]
- A year after Russia’s invasion, the scope of cyberwar in Ukraine comes into focus [AJ VICENS AND ELIAS GROLL, CyberScoop]
- Firms Who Pay Ransom Subsidise 10 New Attacks: Report [Phil Muncaster, Infosecurity Magazine]
- The mobile malware threat landscape in 2022 [TATYANA SHISHKOVA, Secure List]
- Tech manufacturers are leaving the door open for Chinese hacking, Easterly warns [Jonathan Greig, The Record]
Tools
- Bitdefender Releases Decryptor for MortalKombat Ransomware [Bitdefender, Bitdefender]

Infosec bits for 2023 week 8

Sicelo Ncekana

2023-02-24 12:52

Write your post here.

Security news
- WhatsApp, Grindr, and Facebook used to entrap and persecute LGBT citizens, says report [Damien Black, Cybernews]
- Google Paid Over $12 Million As Bug Bounty Rewards In 2022 [Guru, Cyber Security News]
- Microsoft urges Exchange admins to remove some antivirus exclusions [Sergiu Gatlan, BleepingComputer]
- GoDaddy says a multi-year breach hijacked customer websites and accounts | Ars Technica [Dan Goodin, Ars Technica]
Malware
- Beware! Fake ChatGPT Windows & Android Apps Deliver Dangerous Malware [Balaji N, Cyber Security News]
- Hackers Using Trojanized macOS Apps to Deploy Evasive Cryptocurrency Mining Malware [Ravie Lakshmanan, The Hacker News]
- New RambleOn Android Malware Used Against Journalist [Cyware, Cyware]
- Ransomware Attack Forces Produce Giant Dole to Shut Down Plants [Eduard Kovacs, Security Week]
- LockBit gives up on Royal Mail ransom, leaks data and private chats [Damien Black, Cybernews]
- Washington State city allegedly hit by ransomware [Jurgita Lapienytė, Cybernews]
- MyloBot Botnet Spreading Rapidly Worldwide: Infecting Over 50,000 Devices Daily [Ravie Lakshmanan, The Hacker News]
Vulnerabilities and Patches
- A New Kind of Bug Spells Trouble for iOS and macOS Security [Matt Burgerss, Wired]
- Apple Patches Multiple Vulnerabilities In Latest Security Updates – Spiceworks [Anuj Mudaliar, Spiceworks]
- Cisco Patches High-Severity Vulnerabilities in ACI Components [Eduard Kovacs, Security Week]
- Exploit released for critical Fortinet RCE flaw, patch now [Bill Toulas, BleepingComputer]