C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 35

2023-09-01 08:33 - Heloise Meyer

Cybersecurity News:
- Kali Linux 2023.3 released: Kali NetHunter app redesign, 9 new tools, and more! [Help Net Security, Help Net Security]
- How the FBI nuked Qakbot malware from infected Windows PCs [Lawrence Abrams, Bleeping Computer]
- Attackers hiding malicious Word files in PDFs [Myles Illidge, MyBroadband]
- NCSC Issues Cyber Warning Over AI Chatbots [James Coker, Infosecurity Magazine]
- How Hackers Abusing ChatGPT Features For Their Cybercriminal Activities � Bypass Censorship [Tushar Subhra Dutta, Cyber Security News]
Data Breaches:
- Kroll SIM-swap attack: FTX, BlockFi and Genesis clients� info exposed [Helga Labus, Help Net Security]
- Sensitive Data of 10 Million at Risk After French Employment Agency Breach [Kevin Poireault, Infosecurity Magazine]
- 2.6 million DuoLingo users have scraped data released [Pieter Arntz, Malwarebytes]
Vulnerabilities:
- New WinRAR Vulnerability Could Allow Hackers to Take Control of Your PC [THN, The Hacker News]
- Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks [Ionut Arghire, SecurityWeek]
- Hackers exploit critical Juniper RCE bug chain after PoC release [Sergiu Gatlan, Bleeping Computer]
- High-Severity Memory Corruption Vulnerabilities Patched in Firefox, Chrome [Ionut Arghire, SecurityWeek]
- VMware fixes critical vulnerability in Aria Operations for Networks [Helga Labus, Help Net Security]
Malware:
- China-Linked BadBazaar Android Spyware Targeting Signal and Telegram Users [THN, The Hacker News]
- Spain warns of LockBit Locker ransomware phishing attacks [Bill Toulas, Bleeping Computer]
- Juice jacking: Is it a real issue or media hype? [Jennifer Gregory, Security Intelligence]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2