C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 09/21

2021-03-04 19:22 - Renier van Heerden

The Human Factor
- Offboarding: A Checklist for Safely Closing an Employee’s Digital Doors [Sue Poremba, SecurityIntelligence]
- Hackers exploit websites to give them excellent SEO before deploying malware [Charlie Osborne, ZDNet]
Vulnerabilities and Leaks
- Working Windows and Linux Spectre exploits found on VirusTotal [Sergiu Gatlan, BleepingComputer]
- Far-Right Platform Gab Has Been Hacked—Including Private Data [Andy Greenberg, Wired]
- First Fully Weaponized Spectre Exploit Discovered Online [Catalin Cimpanu, The Record]
- Unprotected Private Key Allows Remote Hacking of Rockwell Controllers [Eduard Kovacs, Security Week]
- Exclusive: Flaws in Zoom’s Keybase App Kept Chat Images From Being Deleted [Paul Roberts, The Security Ledger]
Ransomware (But it used to be a great plugin)
- Attackers Turn Struggling Software Projects Into Trojan Horses [Robert Lemos, DARKReading]
- Is Your Browser Extension a Botnet Backdoor? [Krebs on Security]
SolarWinds
- Microsoft Releases Free Tool for Hunting SolarWinds Malware [Kelly Jackson Higgins, DARKReading]
- Intern caused solarwinds123 password leak, former SolarWinds CEO says [Pierluigi Paganini, SecurityAffairs]
Eduction and Research
- FBI Investigating Michigan School District Hack [Sarah Coble, Infosecurity Magazine]
- Oxford University lab with COVID-19 research links targeted by hackers [Charlie Osborne, ZDNet]
Other
- Security, Privacy Issues Found in Tens of COVID-19 Contact Tracing Apps [Ionut Arghire, Security Week]
- Social network Gab hacked, hit with $500,000 ransom demand [Carrie Mihalcik, CNet]
- NSA Releases Guidance on Zero Trust Security Model [US CERT]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2