C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 6

2023-02-10 12:42 - Kgwadi Matenche

Cybersecurity News:
- Google Chrome 110 arrives – but not all Windows PCs will get it [Danny Palmer, ZDNET]
- First Linux variant of Clop ransomware targeted universities, colleges but was flawed [Jonathan Greig, The Record]
Malware:
- ESXiArgs Ransomware Hits Over 3,800 Servers as Hackers Continue Improving Malware [Eduard Kovacs, SecurityWeek]
  - VMware Security Response Center (vSRC) Response to ‘ESXiArgs’ Ransomware Attacks [Edward Hawkins, VMware]
Vulnerabilities & Patches:
- Android’s February 2023 Updates Patch 40 Vulnerabilities [Ionut Arghire, SecurityWeek]
- Actively exploited GoAnywhere MFT zero-day gets emergency patch [Sergiu Gatlan, Bleeping Computer]
- Patch your Jira Service Management Server and Data Center and check for compromise! [Zeljka Zorz, Help Net Security]
Breaches & Leaks:
- Reddit Breached With Stolen Employee Credentials [Dark Reading Staff, Dark Reading]
- All classes canceled at Irish university as it announces ‘significant IT breach’ [Alexander Martin, The Record]
- Mortgage Broker 8Twelve Exposes Data of Canadian Residents [Habiba Rashid, HackRead]
- RSAWeb hit by ransomware attack [Jan Vermeulen, MyBroadband]
Others:
- PayPal and Twitter abused in Turkey relief donation scams [Ax Sharma, Bleeping Computer]
- Lessons Learned on Ransomware Prevention from the Rackspace Attack [Bleeping Computer]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2