C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 29

2023-07-21 14:44 - Kgwadi Matenche

Cybersecurity News:
- Microsoft: Hackers turn Exchange servers into malware control centers [Lawrence Abrams, Bleeping Computer]
- Microsoft Bug Allowed Hackers to Breach Over Two Dozen Organizations via Forged Azure AD Tokens [The Hacker News]
- Massive Targeted Exploit Campaign Against WooCommerce Payments Underway [Ram Gall, Wordfence]
Breaches & Leaks:
- JumpCloud breach traced back to North Korean state hackers [Sergiu Gatlan, Bleeping Computer]
- Estée Lauder takes down some systems following cyberattack [Matt Kapko, Cybersecurity Dive]
- VirusTotal Data Leak Exposes Some Registered Customers’ Details [The Hacker News]
- Thousands of images on Docker Hub leak auth secrets, private keys [Bill Toulas, Bleeping Computer]
Vulnerabilities & Patches:
- Adobe Releases New Patches for Exploited ColdFusion Vulnerabilities [Eduard Kovacs, Security Week]
- Citrix NetScaler zero-day exploited in the wild, patch is available [Helga Labus, Help Net Security]
- Chrome 115 Update for Windows, MacOS, and Linux – 20 Vulnerabilities Patched [Guru, Cyber Security News]
- Oracle Releases 508 New Security Patches With July 2023 CPU [Ionut Arghire, Security Week]
Other:
- P2P Self-Replicating Cloud Worm Targets Redis [Dark Reading]
- Google fixes ‘Bad.Build’ vulnerability affecting Cloud Build service [Jonathan Greig, The Record]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2