C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 40

2023-10-06 11:01 - Heloise Meyer

Cybersecurity News:
- FBI warns of dual ransomware attacks, and other cybersecurity news to know this month [Akshay Joshi, World Economic Forum]
- Kenya hit by record 860m cyber-attacks in a year [R�daction Africanews, Africanews]
- Addressing the People Problem in Cybersecurity [Marc Solomon, Security Week]
- Uber drivers allegedly �hack� airport queuing system and milk riders [Hanno Labuschagne, MyBroadband]
Vulnerabilities & Patches:
- Supermicro’s BMC Firmware Found Vulnerable to Multiple Critical Vulnerabilities [Newsroom, The Hacker News]
- Qualcomm says hackers exploit 3 zero-days in its GPU, DSP drivers [Bill Toulas, BleepingComputer]
- Critical Zero-Day Bug in Atlassian Confluence Under Active Exploit [Tara Seals, Dark Reading]
- Exploits released for Linux flaw giving root on major distros [Sergiu Gatlan, BleepingComputer]
- Apple Rolls Out Security Patches for Actively Exploited iOS Zero-Day Flaw [Newsroom, The Hacker News]
Hacks & Attacks:
- Sony Confirms Data Stolen in Two Recent Hacker Attacks [Eduard Kovacs, Security Week]
- QakBot Threat Actors Still in Action, Using Ransom Knight and Remcos RAT in Latest Attacks [Newsroom, The Hacker News]
Malware:
- Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware [Newsroom, The Hacker News]
- New BunnyLoader threat emerges as a feature-rich malware-as-a-service [Bill Toulas, BleepingComputer]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2