C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 04/21

2021-01-29 15:41 - Kgwadi Matenche

News
- International Action Targets Emotet Crimeware [Brian Krebs, Krebs on Security]
- Apple Adds ‘BlastDoor’ to Secure iPhones From Zero-Click Attacks [Ryan Naraine, Security Week]
- Critical Vulnerability Patched in ‘sudo’ Utility for Unix-Like OSes [Jai Vijayan, Information Week]
- DDoS-Guard To Forfeit Internet Space Occupied by Parler [Brian Krebs, Krebs on Security]
- The Great African IP Address Heist – South African Internet resources worth R558 million usurped with shady domains [Jan Vermeulen, MyBroadband]
Breaches
- BYKEA data breach: Pakistani ride-hailing app exposed 400m records [Waqas, Hack Read]
- USCellular hit by a data breach after hackers access CRM software [Lawrence Abrams, Bleeping Computer]
Vulnerabilities
- Windows Installer zero-day vulnerability gets free micropatch [Ionut Ilascu, Bleeping Computer]
- CVE-2021-3156: Heap-Based Buffer Overflow in Sudo [Animesh Jain, Qualys]
Leaks and Privacy
- GRINDR faces $10mn fine in Norway for illigal data Sharing [AFP, EWN]
- Privacy predictions for 2021 [Anna Larkina, Vladislav Tushkanov, Dmitry Momotov, SECURELIST]
- Giant leak exposes data from almost all Brazilians [Leonard Manson, Somag News]
Other News
- Microsoft rolls out Application Guard for Office to all customers [Sergiu Gatlan, Bleeping Computer]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2