C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 28

2023-07-14 10:27 - Heloise Meyer

Cybersecurity News:
- Microsoft Thwarts Chinese Cyber Attack Targeting Western European Governments [The Hacker News, The Hacker News]
- Why Higher Ed Institutions Should Be Concerned About Rising Malware Attacks [Doug Bonderud, EdTech]
- CVSS 4.0 released, to help assess real-time threat and impact of vulnerabilities [Help Net Security, Help Net Security]
- How Are Higher Ed Cyber Attacks Evolving? [Brandon Paykamian, Governement Technology]
- WormGPT Cybercrime Tool Heralds an Era of AI Malware vs. AI Defenses [Nathan Eddy, Dark Reading]
Malware:
- Android malware disguised as ChatGPT apps targeting smartphone users : Palo Alto Networks Unit 42 Research [Manila Standard – Tech, Manila Standard – Tech]
- Triada Malware Infects Android Devices via Fake Telegram App [WAQAS, Hack Read]
- Source code for BlackLotus Windows UEFI malware leaked on GitHub [Bill Toulas, Bleeping Computer]
- Malware Steals Over 100,000 ChatGPT Accounts [Grace Ashiru, Tech in Africa]
- Fake PoC for Linux Kernel Vulnerability on GitHub Exposes Researchers to Malware? [The Hacker News, The Hacker News]
- New PyLoose Linux malware mines crypto directly from memory [Bill Toulas, Bleeping Computer]
Vulnerabilities & Patches:
- Juniper Networks Patches High-Severity Vulnerabilities in Junos OS [Ionut Arghire, Security Week]
- Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers [Zeljka Zorz, Help Net Security]
- Microsoft Fixes Six Zero-Days This Patch Tuesday [Phil Muncaster, Infosecurity Magazine]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2