C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 7

2023-02-17 19:32 - Renier van Heerden

Ransomeware
- Ransomware gang uses new zero-day to steal data on 1 million patients [Carly Page, TechCrunch]
- City of Oakland declares state of emergency after ransomware attack [Sergiu Gatlan, BleepingComputer]
- Ransomware Attacks on Industrial Firms Increased by 87percent in 2022 [Jack Gillum, Bloomberg]
- Cryptocurrency users in the US hit by ransomware and Clipper malware [Cedric Pernet, TechRepublic]
Hacks
- FBI confirms it’s investigating a cyber incident on its own network [Carly Page, TechCrunch]
- Microsoft Exchange ProxyShell flaws exploited in new crypto-mining attack [Bill Toulas, BleepingComputer]
- Researchers unearth Windows backdoor that’s unusually stealthy [Dan Goodin, Arstechnica]
- A researcher tried to buy mental health data. It was surprisingly easy. [Kevin Collier, NBCnews]
Information
- How to manage third-party cybersecurity risks that are too costly to ignore [Jon Siegler, TechCrunch]
- CISA warns of Windows and iOS bugs exploited as zero-days [Sergiu Gatlan, BleepingComputer]
- Microsoft will forcibly remove Internet Explorer from most Windows 10 PCs today [Andrew Cunningham, Arstechnica]
- Hackers are selling a service that bypasses ChatGPT restrictions on malware [Dan Goodin, Arstechnica]
Patch
- Fortinet fixes critical RCE flaws in FortiNAC and FortiWeb [Bill Toulas, BleepingComputer]
- Microsoft February 2023 Patch Tuesday fixes 3 exploited zero-days, 77 flaws [Lawrence Abrams, BleepingComputer]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2