C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 11/21

2021-03-19 11:10 - Schalk Peach

Data Leaks (NOT Breaches)
- Utah Company Stored Passport Scans on Unsecured Server [Sarah Coble, InfoSecurity Magazine]
Microsoft Exchange
- Updates on Microsoft Exchange Server Vulnerabilities [US CERT]
- Microsoft releases one-click mitigation tool for Exchange Server hacks [Charlie Osborne, ZDNet]
Education
- FBI warns of escalating Pysa ransomware attacks on education orgs [Sergiu Gatlan, Bleeping Computer]
The SPECTRE Returns
- A Spectre proof-of-concept for a Spectre-proof web [Google Security Blog]
More Solarwinds Fallout
- Mimecast Update: SolarWinds Hackers Stole Source Code [Akshaya Asokan, BankInfoSecurity]
Business Security Featurette – Business Email Compromise
- BEC Attacks: What They Are and How to Protect Yourself [WestStar Bank]
- Business Email Compromise [TrendMicro]
- How to Recognize a Business Email Compromise Attack [Joan Goodchild, SecurityIntelligence]
International Regulation News
- California Passes New Regulation Banning “Dark Patterns” Under Landmark Privacy Law [Brianna Provenzano, Gizmodo]
- Spanish Data Protection Agency Issues Highest Ever Fine [Sarah Coble, Infosecurity Magazine]
Other Things
- Fintech Giant Fiserv Used Unclaimed Domain [Krebs on Security]
- OVH Data Center Fire Impacts Cyber-criminals [Sarah Coble, Infosecurity Magazine]
- Critical RCE Flaw Reported in MyBB Forum Software—Patch Your Sites [Ravie Lakshmanan, The Hackers News]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2