C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 03/21

2021-01-22 12:14 - Renier van Heerden

News
- SA can expect cyber threats during Covid vaccination roll out [Rudolph Nkgadima, IOL]
- Massive blackouts have hit Iran. The government is blaming bitcoin mining [Miriam Berger, The Washington Post]
- Global Cybersecurity Spending to Soar 10 percent in 2021 [Phil Muncaster, Infosecurity Magazine]
Breaches
- OpenWRT Forum user data stolen in weekend data breach [Ionut Ilascu, Bleeping Computer]
- Hackers alter stolen regulatory data to sow mistrust in COVID-19 vaccin [Dan Goodin, Ars Technica]
- Malwarebytes said it was hacked by the same group who breached SolarWinds [Catalin Cimpanu, ZDNet]
- Hacker leaks full database of 77 million Nitro PDF user records [Sergiu Gatlan, Bleeping Computer]
- MyFreeCams site hacked to steal info of 2 million paying users [Ionut Ilascu, Bleeping Computer]
Advice
- What you should know before leaking a zoom Meeting [Nikita Mazurov, The Intercept]
- FireEye releases tool for auditing networks for techniques used by SolarWinds hackers [GitHub]
- NSA urges system administrators to replace obsolete TLS protocols [Catalin Cimpanu, ZDNet]
- Microsoft Edge gets a password generator, leaked credentials monitor [Bleeping Computer]
- Microsoft shares how SolarWinds hackers evaded detection [Sergiu Gatlan, Bleeping Computer]
Privacy
- I looked at all the ways Microsoft Teams tracks users and my head is spinning [ Chris Matyszczyk, ZDNet]
- Parler seems to be sliding back onto the Internet, but not onto mobile [Kate Cox, Ars Technica]
- Hacker blunder leaves stolen passwords exposed via Google search [Ionut Ilascu, Bleeping Computer]
Patch
- Cisco fixes critical pre-auth bugs in SD-WAN, cloud license manager [Sergiu Gatlan, Bleeping Computer]
- DNSpooq Flaws Expose Millions of Devices to DNS Cache Poisoning, Other Attacks [Eduard Kovacs, Security Week]
- Linux users should patch now to block new FreakOut malware which exploits new vulnerabilities [Check Point Software Technologies]
- Exploit Allows Root Access to SAP [Sarah Coble, Info Security]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2