C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 20

2023-05-19 11:32 - Heloise Meyer

Cybersecurity News:
- Cyber attacks on e-commerce sites increased in 2022 [William Brederode, News24]
- Popular Android TV boxes sold on Amazon are laced with malware [Zack Whittaker, TechCrunch]
- Microsoft is scanning the inside of password-protected zip files for malware [Dan Goodin, Ars Technica]
- Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware [Ravie Lakshmanan, The Hacker News]
Vulnerabilities & Patches:
- Cisco squashes critical bugs in small biz switches [Jeff Burt, The Register]
- FBI-CISA warn critical PaperCut vulnerability being exploited against education sector [Steve Zurier, SC Media]
- WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities [Ravie Lakshmanan, The Hacker News]
- CISA: Several Old Linux Vulnerabilities Exploited in Attacks [Eduard Kovacs, Security Week]
- Chrome 113 Security Update Patches Critical Vulnerability [Ionut Arghire, Security Week]
Cyberattacks & Exploits:
- This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide [Ravie Lakshmanan, The Hacker News]
- VMware ESXi, Linux systems targeted by new MichaelKors RaaS operation [SC Staff, SC Media]
- KeePass exploit helps retrieve cleartext master password, fix coming soon [Bill Toulas, BleepingComputer]
- Critical Infrastructure Organizations Warned of BianLian Ransomware Attacks [Ionut Arghire, Security Week]
Data Breach:
- Discord suffers data breach [Staff Writer, MyBroadband]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2