C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 11

2023-03-17 14:13 - Kgwadi Matenche

Security News:
- Hackers now use Microsoft OneNote attachments to spread malware [Lawrence Abrams, Bleeping Computer]
- Project Zero: Samsung Mobile Chipsets Vulnerable to Baseband Code Execution Exploits [Ryan Naraine, Security Week]
- Leveraging Behavioral Analysis to Catch Living-Off-the-Land Attacks [Dark Reading]
Breaches & Leaks:
- UK’s largest state boarding school announces ‘sophisticated cyberattack’ [Alexander Martin, The Record]
- Latitude cyberattack leads to data theft at two service providers [Bill Toulas, Bleeping Computer]
Vulnerabilities & Patches:
- Microsoft Pins Outlook Zero-Day Attacks on Russian Actor, Offers Detection Script [Ryan Naraine, Security Week]
- Multiple threat actors exploited Progress Telerik bug to breach U.S. federal agency [Pierluigi Paganini, Security Affairs]
- Fortinet: New FortiOS bug used as zero-day to attack govt networks [Sergiu Gatlan, Bleeping Computer]
- SAP releases security updates fixing five critical vulnerabilities [Bill Toulas, Bleeping Computer]
- Cisco fixed CVE-2023-20049 DoS flaw affecting enterprise routers [Pierluigi Paganini, Security Affairs]
Others:
- Kaspersky releases tool for decrypting Conti-based ransomware [Kaspersky]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2