C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 4

2023-01-27 15:04 - Maajied Moos

Security news
- Electronic health record giant NextGen dealing with cyberattack [Jonathan Greig, The Record]
- Riot Games hacked, delays game patches after security breach [Sergiu Gatlan, Bleeping Computer]
- Enterprises remain vulnerable through compromised API secrets [Help Net Security, Help Net Security]
- API Security Fundamentals: Everything You Need To Know [PJ Bradley, Tripwire]
- Ohio town working to restore municipal court systems after cyberattack [Jonathan Greig, The Record]
- Security and the Electric Vehicle Charging Infrastructure [Shachar Inbar, Dark Reading]
- Dutch hacker obtained virtually all Austrians’ personal data [Staff Writer, ITNews]
Malware
- Bots Are Now Robocalling to Phish For Your Two-Factor Authentication (2FA) Codes [Neetu Singh, Radware Blog]
- Bitwarden password vaults targeted in Google ads phishing attack [Lawrence Abrams, Bleeping Computer]
Vulnerabilities and Patches
- Around 19,500 end-of-life Cisco routers are exposed to hack [Pierluigi Paganini, Security Affairs]
- Exploits released for two Samsung Galaxy App Store vulnerabilities [Bill Toulas, Bleeping Computer]
- Over 4,500 WordPress Sites Hacked to Redirect Visitors to Sketchy Ad Pages [Ravie Lakshmanan, The Hacker News]
- Lexmark warns of RCE bug affecting 100 printer models, PoC released [Bill Toulas, Bleeping Computer]
- Apple Patches WebKit Code Execution in iPhones, MacBooks [Ryan Naraine, Security Week]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2