C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 5

2023-02-03 12:47 - Heloise Meyer

Cybersecurity News:
- Massive RSAWeb outage — fibre restored, cloud hosting and mobile still offline [Jan Vermeulen, MyBroadband]
- Hacker finds bug that allowed anyone to bypass Facebook 2FA [Lorenzo Franceschi-Bicchierai, TechCrunch]
- Reality check: Is ChatGPT really the next big cybersecurity threat? [Elias Groll, Cyberscoop]
Malware:
- Ransomware attack on data firm ION could take days to fix -sources [James Pearson, Reuters]
- Royal Mail cyberattack linked to LockBit ransomware operation [Lawrence Abrams, BleepingComputer]
- Titan Stealer: A New Golang-Based Information Stealer Malware Emerges [Ravie Lakshmanan, The Hacker News]
- Hackers weaponize Microsoft Visual Studio add-ins to push malware [Bill Toulas, BleepingComputer]
- Prilex POS malware evolves to block contactless transactions [Cedric Pernet, TechRepublic]
- New HeadCrab malware infects 1,200 Redis servers to mine Monero [Sergiu Gatlan, BleepingComputer]
- New Nevada Ransomware targets Windows and VMware ESXi systems [Bill Toulas, BleepingComputer]
Vulnerabilities:
- Over 29,000 QNAP devices vulnerable to code injection attacks [Sergiu Gatlan, BleepingComputer]
- New High-Severity Vulnerabilities Discovered in Cisco IOx and F5 BIG-IP Products [Ravie Lakshmanan, The Hacker News]
- Atlassian’s Jira Software Found Vulnerable to Critical Authentication Vulnerability [Ravie Lakshmanan, The Hacker News]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2