C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 27

2023-07-11 11:12 - Maajied Moos

Cybersecurity News:
- Businesses are ignoring third-party security risks [Help Net Security, Help Net Security]
- Mobile Cyberattacks Soar, Especially Against Android Users [Robert Lemos, Dark Reading]
- DDoS Carpet-Bombing – Coming In Fast And Brutal [Itay Raviv, Radware]
- Teen among suspects arrested in Android banking malware scheme [WAQAS, Hack Read]
- Report Reveals Companies Unprepared For Darknet Data Leaks [Alessandro Mascellino, Info security Magazine]
- ChatGPT Shared Links and Information Protection: Risks and Measures Organizations Must Understand [Matsukawa Bakuei, Trend Micro]
Malware:
- Proxyjacking: The Latest Cybercriminal Side Hustle [Allen West, Akamai]
- Malvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy Terminator [Lucas Silva, RonJay Caragay, Arianne Dela Cruz, Gabriel Cardoso, Trend Micro]
- Musk Losing Battle of Bad Bots as Rate Limits Begin [Phil Muncaster, Info security Magazine]
- New tool exploits Microsoft Teams bug to send malware to users [Bill Toulas, Bleeping Computer]
Vulnerabilities & Patches:
- 300,000+ Fortinet firewalls vulnerable to critical FortiOS RCE bug [Bill Toulas, Bleeping Computer]
- Ghostscript bug could allow rogue documents to run system commands [Paul Ducklin, Naked Security]
- 3 Critical RCE Bugs Threaten Industrial Solar Panels, Endangering Grid Systems [Nate Nelson, Dark Reading]
Breakches, Hacks, Leaks:
- Microsoft denied the data breach after the collective of hacktivists known as Anonymous Sudan claimed to have hacked the company [Pierluigi Paganini, Security Affairs]
- Hackers stole millions of dollars worth of crypto assets from Poly Network platform [Pierluigi Paganini, Security Affairs]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2