C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 10

2023-03-10 13:23 - Heloise Meyer

Cybersecurity News:
- Where are the women in cyber security? On the dark side, study suggests [Brandon Vigliarolo, The Register]
- GitHub makes 2FA mandatory next week for active developers [Sergiu Gatlan, BleepingComputer]
- Darktrace warns of rise in AI-enhanced scams since ChatGPT release [Mark Sweney, The Guardian]
- ChatGPT Integrated Into Cybersecurity Products as Industry Tests Its Capabilities [Eduard Kovacs, SecurityWeek]
- DuckDuckGo launches AI-powered search query answering tool [Bill Toulas, BleepingComputer]
- Defeating the Deepfake Danger [Derek Manky, SecurityWeek]
Malware:
- BlackMamba: Using AI to Generate Polymorphic Malware [Jeff Sims, Security Boulevard]
- Sys01 Stealer’ Malware Targeting Government Employees [Ionut Arghire, SecurityWeek]
- Sneaky malware BlackLotus can bypass important Windows boot functions [Joe Warminsky, The Record]
- Custom Chinese Malware Found on SonicWall Appliance [Eduard Kovacs, SecurityWeek]
- IceFire ransomware now encrypts both Linux and Windows systems [Sergiu Gatlan, BleepingComputer]
Vulnerabilities:
- New Critical Flaw in FortiOS and FortiProxy Could Give Hackers Remote Access [Ravie Lakshmanan, The Hacker News]
- Vulnerability Exposes Cisco Enterprise Routers to Disruptive Attacks [Ionut Arghire, SecurityWeek]
Hacks:
- LastPass Hack: Engineer’s Failure to Update Plex Software Led to Massive Data Breach [Ravie Lakshmanan, The Hacker News]
- Acer confirms breach after 160GB of data for sale on hacking forum [Bill Toulas, BleepingComputer]
- AT&T Vendor Breach Exposes Data on 9M Wireless Accounts [DarkReading, DarkReading]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2