C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 42

2023-10-17 12:57 - Maajied Moos

Cybersecurity News:
- Poor cybersecurity habits are common among younger employees [Help Net Security, Help Net Security]
- Microsoft 365 admins warned of new Google anti-spam rules [Sergiu Gatlan, Bleeping Computer]
- How Keyloggers Have Evolved From the Cold War to Today [Joshua Urianza, Dark Reading]
- Cyber Professionals Alarmed by Growing Attacker Use of AI [Beth Maundrill, InfoSecurity Magazine]
Vulnerabilities & Patches:
- Maintainers warn of vulnerability affecting foundational open-source tool [Jonathan Greig, The Record Media]
- High-Severity Flaws in ConnectedIO’s 3G/4G Routers Raise Concerns for IoT Security [News Room, The Hacker News]
- Patch Tuesday: Code Execution Flaws in Adobe Commerce, Photoshop [Ryan Naraine, Security Week]
- Chrome 118 Patches 20 Vulnerabilities [Ionut Arghire, Security Week]
Hacks & Attacks:
- MGM Resorts ransomware attack led to $100 million loss, data theft [Bill Toulas, Bleeping Computer]
- UK Power and Data Manufacturer Volex Hit by Cyberattack [Deeba Ahmed, Hack Read]
Malware:
- In The Box – Mobile Malware Webinjects Marketplace [Cybercrime Intelligence, Resecurity]
- Leveraging a Hooking Framework to Expand Malware Detection Coverage on the Android Platform [Lee Wei Yeong, Xingjiali Zhang, Yang Ji and Wenjun Hu, Unit 42]
- Recently Patched TagDiv Plugin Flaw Exploited to Hack Thousands of WordPress Sites [Eduard Kovacs, Security Week]
- THE SOURCE CODE OF THE 2020 VARIANT OF HELLOKITTY RANSOMWARE WAS LEAKED ON A CYBERCRIME FORUM [Pierluigi Paganini, Security Affairs]
- HTTP/2 Rapid Reset: deconstructing the record-breaking attack [Lucas Pardue and Julien Desgats, Cloudflare]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2