C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 25

2023-06-23 13:42 - Kgwadi Matenche

Cybersecurity News:
- Alert: Million of GitHub Repositories Likely Vulnerable to RepoJacking Attack [Ravie Lakshmanan, The Hacker News]
- 100,000 Hacked ChatGPT Accounts Discovered on Dark Web [Waqas, HackRead]
- Hackers warn University of Manchester students of imminent data leak [Lawrence Abrams, Bleeping Computer]
- Supply Chain Attack: Abandoned S3 Buckets Used for Malicious Payloads [Deeba Ahmed, HackRead]
Breaches & Leaks:
- Iowa’s largest school district confirms ransomware attack, data theft [Sergiu Gatlan, Bleeping Computer]
- Russia-linked APT28 hacked Roundcube email servers of Ukrainian entities [Pierluigi Paganini, Security Affairs]
- UPS discloses data breach after exposed customer info used in SMS phishing [Sergiu Gatlan, Bleeping Computer]
Vulnerabilities & Patches:
- VMware Aria Operations for Networks vulnerability exploited in the wild [Zeljka Zorz, Help Net Security]
- Asus Patches Highly Critical WiFi Router Flaws [Ryan Naraine, Security Week]
- VMware fixes vCenter Server bugs allowing code execution, auth bypass [Sergiu Gatlan, Bleeping Computer]
- Apple addressed actively exploited zero-day flaws in iOS, macOS, and Safari [Pierluigi Paganini, Security Affairs]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2