C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 36

2023-09-08 13:17 - Maajied Moos

Cybersecurity News:
- 5 ways in which FHE can solve blockchain�s privacy problems [Pascal Paillier, Help Net Security]
- Spam is up, QR codes emerge as a significant threat vector [Help Net Security, Help Net Security]
- Zero-day attacks are on the rise. Can patches keep up? [Sue Poremba, Security Intelligence]
- 2023 Cost of a Data Breach: Key Takeaways [Matthew Jerzewski, Tripwire]
- Demystifying Smishing vs Phishing Attacks for a Safer Online Experience [Cofense, Cofense]
Data Breaches:
- Golf club maker Callaway says 1 million affected by data breach [Joe Warminsky, The Record]
- University of Sydney data breach impacts recent applicants [Bill Toulas, Bleeping Computer]
- Attackers accessed UK military data through high-security fencing firm’s Windows 7 rig [Richard Speed, The Register]
Vulnerabilities:
- ASUS routers vulnerable to critical remote code execution flaws [Bill Toulas, Bleeping Computer]
- Mend.io SAML Vulnerability Exposed [Alessandro Mascellino, Info Security Magazine]
- Zero-Day Alert: Latest Android Patch Update Includes Fix for Newly Actively Exploited Flaw [THN, The Hacker News]
- Chrome 116 Update Patches High-Severity Vulnerabilities [Ionut Arghire, Security Week]
Malware:
- Chrome extensions can steal plaintext passwords from websites [Bill Toulas, Bleeping Computer]
- MSSQL Databases Under Fire From FreeWorld Ransomware [Nathan Eddy, Dark Reading]
- Hackers Exploit MinIO Storage System Vulnerabilities to Compromise Servers [THN, The Hacker News]
- Developers Warned of Malicious PyPI, NPM, Ruby Packages Targeting Macs [Ionut Arghire, Security Week]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2