C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 15

2023-04-14 12:47 - Heloise Meyer

Cybersecurity news:
- Hackers hijacking websites to spread malware through fake Chrome updates [Myles Illidge, MyBroadband]
- AI-created malware sends shockwaves through cybersecurity world [Kurt Knutsson, Fox News]
- WhatsApp Introduces New Device Verification Feature to Prevent Account Takeover Attacks [Ravie Lakshmanan, The Hacker News]
Data Breaches:
- 400,000 Users Hit by Data Breach at Media Player Maker Kodi [Ionut Arghire, SecurityWeek]
- KFC & Pizza Hut Discloses Data Breach – Users Personal Information Stolen [Guru, Cyber Security News]
- Hyundai data breach exposes owner details in France and Italy [Bill Toulas, BleepingComputer]
Vulnerabilities & Patches:
- Critical Vulnerability in Hikvision Storage Solutions Exposes Video Security Data [Eduard Kovacs, SecurityWeek]
- Microsoft patches vulnerability used in Nokoyawa ransomware attacks [Apurva Venkat, CSO]
- Why you should patch the Windows QueueJumper vulnerability immediately [Lucian Constantin, CSO]
Cyber Attacks:
- Hackers Flood NPM with Bogus Packages Causing a DoS Attack [Ravie Lakshmanan, The Hacker News]
- Taiwanese PC Company MSI Falls Victim to Ransomware Attack [Ravie Lakshmanan, The Hacker News]
- 1M+ WordPress Sites Hacked via Zero-Day Plug-in Bugs [Tara Seals, Dark Reading]
- iPhones Hacked via Zero-click Exploit to Drop QuaDream Spyware [Guru, Cyber Security News]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2