C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 08/20

- Roderick Mooi

  1. Cyber Fitness Takes More Than a Gym Membership & a Crash Diet [Ryan Weeks (Datto CISO), DarkReading/Informa PLC]
  2. Why you can’t bank on backups to fight ransomware anymore [Sean Gallagher, Ars Technica/Condé Nast]
    - see also: How to Protect Your Networks from Ransomware
  3. Three Italian universities hacked by LulzSec_ITA collective [Pierluigi Paganini (ENISA), Security Affairs]
  4. Iranian hackers have been hacking VPN servers to plant backdoors in companies around the world [Catalin Cimpanu, Zero Day]
  5. Actors Still Exploiting SharePoint Vulnerability to Attack Middle East Government Organizations [Robert Falcone, Palo Alto Networks]
  6. 37.3% of Vulnerabilities in 2019 Had Available Exploit Code or a Proof of Concept [Risk Based Security]
  7. Nedbank says 1.7 million customers impacted by breach at third-party provider [Catalin Cimpanu, Zero Day]
    - see also: The Southern African Fraud Prevention Service (especially if you were impacted)
  8. Perilous Peripherals: The Hidden Dangers Inside Windows & Linux Computers [Eclypsium]
  9. OpenSSH FIDO/U2F Support (search for: “FIDO/U2F Support”)
  10. Encoding Stolen Credit Card Data on Barcodes [Brian Krebs]
  11. Sale of corp.com can expose corporate data [Fahmida Y. Rashid, Duo Security]
  12. Martin and Dorothie Hellman on Love, Crypto & Saving the World [Sara Peters, Dark Reading / Informa PLC]