C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 13

2023-03-31 09:48 - Sicelo Ncekana

Security News:
- Hackers compromise 3CX desktop app in a supply chain attack [Sergiu Gatlan, Bleeping Computer]
- DBatLoader Sweeps European Countries With Multiple Malware Payloads [Cyware, Cyware]
- AlienFox source code toolset harvests credentials from 18 cloud services [Steve Zurier, SC Magazine]
- Clipboard-Injector Attacks Target Cryptocurrency Users [Alessandro Mascellino, Info-security Magazine]
- Beware of new MacStealer Malware that can steal your iCloud keychain data and passwords [Kurt Knutsson, Fox news]
Breaches & Leaks:
- NHS condemned for outing HIV service users in ‘distressing’ data breach: ‘Simply no excuse’ [Sophie Perry, Pink News]
- Latitude Financial data breach now impacts 14 million customers [Bill Toulas, Bleeping Computer]
- Procter & Gamble confirm breach [Vilius Petkauskas, Cybernews]
- DarkBit puts data from Israel’s Technion university on sale [Apurva Venkat, CSO Online]
- Toyota Italy accidentally leaked sensitive data [Pierluigi Paganini, Security Affairs]
- ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exploitation [Eduard Kovacs, Security Week]
Vulnerabilities & Patches:
- Researchers Detail Severe “Super FabriXss” Vulnerability in Microsoft Azure SFX [Ravie Lakshmanan, The Hacker News]
- Google: Spyware vendors exploiting iOS, Android zero days [Arielle Waldman, TechTarget]
- You Need to Update Apple’s iOS 16.4 for More Than the Goose Emoji [Kate O’Flaherty, Wired]
- Microsoft Patches ‘Dangerous’ RCE Flaw in Azure Cloud Service [Elizabeth Montalbano, Dark Reading]
- Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks [Eduard Kovacs, Security Week]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2