C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 2

2023-01-13 10:48 - Renier van Heerden

Hacking
- Vulnerability with 9.8 severity in Control Web Panel is under active exploit [Dan Goodin, Arstechnica]
- A government watchdog spent Dollars 15,000 to crack a federal agency’s passwords in minutes [Zack Whittaker, Tech Crunch]
- Here’s how to remotely take over a Ferrari…account, that is [Jessica Lyons Hardcastle, The Register]
- Hackers hit websites of Danish central bank, other banks [Jacob Gronholt-Pedersen and Nikolaj Skydsgaard, Reuters]
- New SHC-compiled Linux malware installs cryptominers, DDoS bots [Bill Toulas, Bleeping Computer]
- Slack’s private GitHub code repositories stolen over holidays [Ax Sharma, Bleeping Computer]
Randsomeware
- Hackers stole data of 460,000 individuals in MFHS ransomware attack [Carly Page, Tech Crunch]
- Rackspace says hackers accessed customer data during ransomware attack [Carly Page, Tech Crunch]
Patches
- Microsoft ends Windows 7 security updates [Zack Whittaker, Tech Crunch]
- Microsoft fixes Windows database connections it broke in November [Jeff Burt, The Register]
- Cisco warns of auth bypass bug with public exploit in EoL routers [Sergiu Gatlan, Bleeping Computer]
Odds
- A corrupt file led to the FAA ground stoppage. It was also found in the backup system [Gregory Wallace and Pete Muntean,, CNN]
- Homeland Security, CISA builds AI-based cybersecurity analytics sandbox [Jeff Burt, The Register]
- GitHub makes it easier to scan your code for vulnerabilities [Sergiu Gatlan, Bleeping Computer]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2